CA ACF2 15.0 CA RS 1405 Service List · CA ACF2 4 CA RS 1405 Service List for CAX1F03 FMID Service Description Hiper CAX1F03 RO68914 CICS: XCMD VALIDATION FOR JESSPOOL ON INQUIRE

CA ACF2 15.0 1

CA RS 1405 Service ListCA ACF2 15.0 1

CA RS 1405 Service List

Release Service Description Hiper

15.0 RO66300 ABEND S23E DURING CPF SHUTDOWN

RO66336 SAFCRXTR 0C4 ON GENCERT FROM A CSR

RO66687 ENVRIN IGNORED ON A SAF FASTAUTH CALL **HIPER**

RO66898 U4091-20 RUNNING DIGITAL CERTIFICATE UTILITY

RO67537 ABEND S0C4 IN ACF01UPD AFTER RO65284 **HIPER**

RO68196 ACFF1004 $MFS ERROR WITH LIST LIKE AND ARCHIVE

RO68431 ABEND S0C3 IN ACF60ACC WITH THE ACCESS COMMAND

RO68527 GETUMAP RETURNS DIFFERENT USERID AFTER RO62767

RO68774 CAISERVX DOES NOT DISPLAY LOAD MODULE NAME FOR ACF2 EXITS

RO68850 SMF FLAT FILE DS RECORD MINOR FIELD "UNKNOWN"

RO68914 CICS: XCMD VALIDATION FOR JESSPOOL ON INQUIRE TEMPSTORAGE

RO68916 S0D3-13 WITH THE CPF INTERFACE

RO68922 CICS: REGION HANG/LOOP ON FOR_USERID XSRC CALL **HIPER**

RO68980 ACFESAGE HAS INVALID $USERDATA DISPLAY

RO68998 PTKTDATA RECORD CAN BE INSERTED WITH NO SSKEY

RO69075 SAF EXTRACT PWPHRASE I/O WHEN OPTION NOT ENABLED

RO69144 ALLOW SAF EXTRACT APPLDATA FOR SERVAUTH AND TMEADMIN

RO69234 RULE LINE WITH DATA PARM NOT PARSED CORRECTLY

RO69326 LOOP IN ACF04RSC TRYING TO STORE A LONG DB2 RULE KEY

RO69441 LIST PROFILE(ALL) INCOMPLETE

RO69704 POSSIBLE OVERLAY ON AN EXTRACT OF BAD DATA IN OMVS PROGRAM **HIPER**

The CA RS 1405 service count for this release is 21

CA ACF2 14.0 2

CA RS 1405 Service ListCA ACF2 14.0 2

CA RS 1405 Service List

Release Service Description Hiper

14.0 NO-SRVC CA RS 1405 Contains No Service For This Release of This Product.

The CA RS 1405 service count for this release is 0

CA ACF2 3

CA RS 1405 Service List for CAX1F00CA ACF2 3

CA RS 1405 Service List for CAX1F00

FMID Service Description Hiper

CAX1F00 RO66300 ABEND S23E DURING CPF SHUTDOWN

RO66336 SAFCRXTR 0C4 ON GENCERT FROM A CSR

RO66687 ENVRIN IGNORED ON A SAF FASTAUTH CALL **HIPER**

RO66898 U4091-20 RUNNING DIGITAL CERTIFICATE UTILITY

RO67537 ABEND S0C4 IN ACF01UPD AFTER RO65284 **HIPER**

RO68196 ACFF1004 $MFS ERROR WITH LIST LIKE AND ARCHIVE

RO68431 ABEND S0C3 IN ACF60ACC WITH THE ACCESS COMMAND

RO68527 GETUMAP RETURNS DIFFERENT USERID AFTER RO62767

RO68774 CAISERVX DOES NOT DISPLAY LOAD MODULE NAME FOR ACF2 EXITS

RO68850 SMF FLAT FILE DS RECORD MINOR FIELD "UNKNOWN"

RO68916 S0D3-13 WITH THE CPF INTERFACE

RO68980 ACFESAGE HAS INVALID $USERDATA DISPLAY

RO68998 PTKTDATA RECORD CAN BE INSERTED WITH NO SSKEY

RO69075 SAF EXTRACT PWPHRASE I/O WHEN OPTION NOT ENABLED

RO69144 ALLOW SAF EXTRACT APPLDATA FOR SERVAUTH AND TMEADMIN

RO69234 RULE LINE WITH DATA PARM NOT PARSED CORRECTLY

RO69326 LOOP IN ACF04RSC TRYING TO STORE A LONG DB2 RULE KEY

RO69441 LIST PROFILE(ALL) INCOMPLETE

RO69704 POSSIBLE OVERLAY ON AN EXTRACT OF BAD DATA IN OMVS PROGRAM **HIPER**

The CA RS 1405 service count for this FMID is 19

CA ACF2 4

CA RS 1405 Service List for CAX1F03CA ACF2 4

CA RS 1405 Service List for CAX1F03

FMID Service Description Hiper

CAX1F03 RO68914 CICS: XCMD VALIDATION FOR JESSPOOL ON INQUIRE TEMPSTORAGE

RO68922 CICS: REGION HANG/LOOP ON FOR_USERID XSRC CALL **HIPER**

The CA RS 1405 service count for this FMID is 2

CA ACF2 15.0 5

CA RS 1405 - PTF RO66300 DetailsCA ACF2 15.0 5

CA RS 1405 - PTF RO66300 Details

Release Service Details15.0 RO66300 RO66300 M.C.S. ENTRIES = ++PTF (RO66300)

ABEND S23E DURING CPF SHUTDOWN

PROBLEM DESCRIPTION:

There is a possibility of getting a S23E abend during

CPF shutdown. This abend could be seen during recovery

if another abend occurred during shutdown. Our recovery

code is incorrectly going through code to detach the

CPF tasks a second time.

SYMPTOMS:

CAS5130E ABEND S23E IN LMOD : CPFC1MA0 - CSECT: CPFC1MA0

IMPACT:

Multiple abends during CPF shutdown.

CIRCUMVENTION:

None

PRODUCT(S) AFFECTED: CA-ACF2-MVS Release 15.0

Star Problem(s):

ACF2MS 9596

Copyright (C) 2014 CA. All rights reserved. R01016-ACF150-SP1

DESC(ABEND S23E DURING CPF SHUTDOWN) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO20695 RO55652 )

SUP ( TR66300 )

++HOLD (RO66300) SYSTEM FMID(CAX1F00)

REASON (DYNACT ) DATE (14104)

COMMENT (

+----------------------------------------------------------------------+

| CA-ACF2-MVS Release 15.0 |

+----------+-----------------------------------------------------------+

|SEQUENCE | After Apply |

+----------+-----------------------------------------------------------+

|PURPOSE | To implement the fix. |

+----------+-----------------------------------------------------------+

|USERS | All users. |

|AFFECTED | |

+----------+-----------------------------------------------------------+

|KNOWLEDGE | Operator commands |

|REQUIRED | |

+----------+-----------------------------------------------------------+

|ACCESS | z/OS Operator console |

|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************

* STEPS TO PERFORM *

**************************

1. LLA Refresh

2. Stop and restart CPF

).

CA ACF2 15.0 6




SAFCRXTR 0C4 ON GENCERT FROM A CSR


An 0C4 abend in SAFCRXTR may occur if GENCERT is attempted

against a certificate request that contains a null subject.

SYMPTOMS:

An 0C4 abend occurs on the GENCERT and the following messages

are displayed:

IEA995I SYMPTOM DUMP OUTPUT

SYSTEM COMPLETION CODE=0C4 REASON CODE=00000011

IMPACT:

Security administrators are unable to generate a certificate

from the input certificate request.

CIRCUMVENTION:

Specify a SUBJSDN value on the GENCERT subcommand.


Star Problem(s):

ACF2MS 9597


DESC(SAFCRXTR 0C4 ON GENCERT FROM A CSR) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO25852 RO35100 RO54831 )

SUP ( RO40539 TR38401 TR38625 TR40539 TR66336 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Activate change without IPL |

+----------+-----------------------------------------------------------+

|USERS | All users |

|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

2. Execute console command 'F ACF2,NEWMOD(SAFCRXTR)'

).

CA ACF2 15.0 7




ENVRIN IGNORED ON A SAF FASTAUTH CALL


There are multiple problems corrected by the this fix.

We are ignoring the ENVRIN parm on a SAF FASTAUTH call

when the plist version is set to 7740 or later. By

ignoring the ENVRIN we end up doing the validation using

an incorrect logonid.

There is also a problem where we do not recognize plist

versions of 7740 or later in our SECTRACE code. If a

SECTRACE is run and a plist of 7740 or later was specified

on a SAF call we will show it as RELEASE 1.9.

SYMPTOMS:

Incorrect validation on a FASTAUTH call.

The SECTRACE displays an invalid RELEASE=.

IMPACT:

Users may get access to resources they should not have

access to.

CIRCUMVENTION:

None


Star Problem(s):

ACF2MS 9602


DESC(ENVRIN IGNORED ON A SAF FASTAUTH CALL) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO29541 RO46590 RO60393 )

SUP ( AR29541 RO32602 RO33604 TR32602 TR33604 TR66687

DC55970 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

2. F ACF2,NEWMOD(ACF9C000)

3. F ACF2,NEWMOD(SAFRT001)

).

CA ACF2 15.0 8




U4091-20 RUNNING DIGITAL CERTIFICATE UTILITY


The Digital Certificate Utility, SAFCRRPT, can ABEND with an LE error

U4091-20 or S0C4 while listing a certificate that has a KEYUSAGE of

'HANDSHAKE DATAENCRYPT DOCSIGN CERTSIGN KEYAGREE'.

SYMPTOMS:

SAFCRRPT ABENDs with U4091-20 during execution. Return code x'20' can

be seen in register R15 in the joblog or an SOC4 abend at various

locations in SAFCRRPT.

IMPACT:

The utility ABENDs and the report is incomplete.

CIRCUMVENTION:

Use ACF CHKCERT subcommand to display the certificate information


Star Problem(s):

ACF2MS 9599


DESC(U4091-20 RUNNING DIGITAL CERTIFICATE UTILITY) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO20643 RO25852 RO35100 RO38900 RO54831 )

SUP ( TR17251 TR20658 RO20658 TR66498 TR66771 TR66896

TR66898 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|USERS | SAFCRRPT users |

|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

).

CA ACF2 15.0 9




ABEND S0C4 IN ACF01UPD AFTER RO65284


The S0C4 abend can occur in ACF01UPD after RO65284

is applied and a site has code in place that is doing

an SVC call passing an older version of the ACVALD

plist.

SYMPTOMS:

CCSR010E SVCARECV S0C4 at xxxxxxxx LMOD ACF00SVA CSECT

ACF01UPD +000492

IMPACT:

We are attempting to check for a flag beyond the end

of the passed plist. If the storage is not there an

0c4 will occur. If we can get to the page of storage

we may either proceed as normal or bypass sending

the request through CPF if the flag we are checking

is on in the storage we are looking at incorrectly.

CIRCUMVENTION:

Reassemble any code that is doing SVC calls to ACF2

with a current ACVALD plist. Current would be any

version of the ACVALD macro from r14 or r15.

PRODUCT(S) AFFECTED:

CA-ACF2-MVS Release 15.0

Star Problem(s):

ACF2MS 9609


DESC(ABEND S0C4 IN ACF01UPD AFTER RO65284) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO65284 )

SUP ( TR67537 AR65284 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

2. Execute console command 'F ACF2,NEWMOD(ACF00SVA)'

).

CA ACF2 15.0 10




ACFF1004 $MFS ERROR WITH LIST LIKE AND ARCHIVE


ACFF1004 $MFS ERROR - MESSAGE UNDEFINED - ACF60MSF 6C0082 when

using the ACF LIST subcommand with LIKE and ARCHIVE operands.

This situation should trigger message ACF67130. The processing

incorrectly attempts to issue message ACF6C130 which causes the

ACFF1004 since message ACF6C130 is not defined. The same error

may occur when the IF operand is specified with ARCHIVE.

SYMPTOMS:

ACFF1004 message on a LIST LIKE (or IF) with ARCHIVE specified

IMPACT:

Incorrect message appears and does not adequately identify

the true problem.

CIRCUMVENTION:

When using the LIST subcommand do not specify ARCHIVE in

conjunction with LIKE and IF.


Star Problem(s):

ACF2MS 9619


DESC(ACFF1004 $MFS ERROR WITH LIST LIKE AND ARCHIVE) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO38736 RO49693 RO54949 )

SUP ( TR68196 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

LLA Refresh

).

CA ACF2 15.0 11




ABEND S0C3 IN ACF60ACC WITH THE ACCESS COMMAND


There is the possibility of getting an S0C3 abend in

ACF60ACC when doing the ACCESS command. The actual

abend is in the ACF60AC2 csect. This abend is done

intensionally in our code when we have run out of our

internal stack entries for processing in the ACF60AC2

module. In this case the abend is caused by our code

having an invalid branch back from an internal routine.

This problem will happen if the ACCESS command output

is attempting to list out the 'Lids: No logonids found'

line for a 5th time. That would mean the output from the

command would have to have 5 different rulelines that

had NO users that match the line.

SYMPTOMS:

COMPLETION CODE SYSTEM = 0C3 REASON CODE = 00000003

PSW AT ENTRY TO ABEND 078D2000 xxxxxxxx ILC 04 INTC 0003

PSW LOAD MODULE ADDRESS = xxxxxxxx OFFSET = xxxxxxxx

NAME=ACF60ACC

IMPACT:

The ACCESS command abends.

CIRCUMVENTION:

None



Star Problem(s):

ACF2MS 9622


DESC(ABEND S0C3 IN ACF60ACC WITH THE ACCESS COMMAND) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO54827 RO54834 RO62824 RO65813 )

SUP ( TR26132 TR26526 RO26526 TR29575 RO29575 TR37157

TR37802 TR38007 RO38007 TR68431 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

).

CA ACF2 15.0 12




GETUMAP RETURNS DIFFERENT USERID AFTER RO62767


After RO62767 is applied to a system, a getUMAP request

passing a UID to get the associated USERID may get a different

value returned.

Prior to RO62767, we would return the current userid if their

UID matched the UID for the getUMAP request. With RO62767

we will return whatever value we find in the incore table

that is found with a binary search. This means the value returned

could be any number of userids if there is more than one userid

with the UID we are looking for.

With the fix for this problem applied, we will go back to the

way it worked prior to RO62767.

SYMPTOMS:

A different userid is returned on a getUMAP call.

IMPACT:

Applications may get a different userid due to this change.

CIRCUMVENTION:

None



Star Problem(s):

ACF2MS 9624


DESC(GETUMAP RETURNS DIFFERENT USERID AFTER RO62767) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO54826 RO60393 RO62767 )

SUP ( TR68527 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

2. F ACF2,NEWMOD(SAFOEDRV)

).

CA ACF2 15.0 13




CAISERVX DOES NOT DISPLAY LOAD MODULE NAME FOR ACF2 EXITS


The CAECIS Common Services Inventory Services program

is used to display information about product information.

ACF2 provides a PDM that will provide the information

about the product. One of the things that is displayed

is information about ACF2 exits in place. On the display

we are not providing the load module name that the

exit has been found in.

LOAD MODULE CONTAINING THE EXIT:

SYMPTOMS:

Missing load module name on the output.

IMPACT:

None

CIRCUMVENTION:

None



Star Problem(s):

ACF2MS 9626


DESC(CAISERVX DOES NOT DISPLAY LOAD MODULE NAME FOR ACF2 EXITS) .

++VER (Z038)

FMID (CAX1F00)

SUP ( TR68774 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. LLA Refresh

).

CA ACF2 15.0 14




SMF FLAT FILE DS RECORD MINOR FIELD "UNKNOWN"


ACFRPTPP may erroneously create SMFFLT flat file records containing

"UNKNOWN" in the minor field for DS report SMF records.

SYMPTOMS:

Reports generated from the SMF flat file may show "UNKNOWN" for

the minor field of dataset events.

IMPACT:

Dataset event reporting is incorrect when the SMF flat file is used

CIRCUMVENTION:

If possible use ACFRPTDS instead of reporting based on the SMF

flat file.


Star Problem(s):

ACF2MS 9627


DESC(SMF FLAT FILE DS RECORD MINOR FIELD "UNKNOWN") .

++VER (Z038)

FMID (CAX1F00)

SUP ( TR68850 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|USERS | ACFRPTPP users |

|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

LLA Refresh

).

CA ACF2 15.0 15




CICS: XCMD VALIDATION FOR JESSPOOL ON INQUIRE TEMPSTORAGE


Some Command Level (XCMD) validations are performed

against the wrong resource names.

Actual Resources Validated Resources

---------------- -------------------

CAPTURESPEC ENABLE

CSD EXTRACT

TEMPSTORAGE JESSPOOL

XMLTRANSFORM DISABLE

SYMPTOMS:

Non-specific depending on if and how these resources

are validated.

IMPACT:

Non-specific depending on if and how these resources

are validated.

CIRCUMVENTION:

Do not use Command Validation

IE: Specify CICSKEY R=XCMD,O=IGNORE in ACF2PARM

or via ACFM transaction, Function OM, Option C.H


CICS/TS Interface for CA ACF2 FOR Z/OS Release 15.0

Star Problem(s):

ACF2MS 9628


DESC(CICS: XCMD VALIDATION FOR JESSPOOL ON INQUIRE TEMPSTORAGE) .

++VER (Z038)

FMID (CAX1F03)

PRE ( RO32495 RO35975 RO45361 RO46083 RO53745 )

SUP ( AR67467 RO67467 TR67467 TR68914 )



COMMENT (

+----------------------------------------------------------------------+

| CA-ACF2-MVS CICS Release 15.0 |

+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Enable updated code |

+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+

|KNOWLEDGE | Linklist contents (optional) |

|REQUIRED | Master console |

+----------+-----------------------------------------------------------+

|ACCESS | Master console |

|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. Perform an LLA REFRESH (if applicable)

2. Restart CICS region(s)

).

CA ACF2 15.0 16




S0D3-13 WITH THE CPF INTERFACE


CPF abend S0D3 With REUSASID=YES

SYMPTOMS:

The following message is issued:

ACFFE100 SVCARECV S0D3 AT xxxxxxxx LMOD N/A CSECT N/A

IMPACT:

CIRCUMVENTION:

Set REUSASID=NO in the DIAGxx member.


Star Problem(s):

ACF2MS 9540


DESC(S0D3-13 WITH THE CPF INTERFACE) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO60393 )

SUP ( RO24628 RO41418 TR24628 TR41418 TR68916 )


REASON (IPL ) DATE (14091)

COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Activate change |

+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. IPL with CLPA

).

CA ACF2 15.0 17




CICS: REGION HANG/LOOP ON FOR_USERID XSRC CALL


CICS Transaction Server for z/OS (CTS) has recently

started exploiting the 'FOR(userid)' clause on DFHXSRC

resource validation calls. The DFHXSRC parameter list

had been updated at CTS 3.2 to support the syntax, but

was not used until recently under CTS 4.2.

If the 'FOR(userid)' data is present, ACF2 CICS

validates resource access against the ID supplied in

the FOR clause instead of against the current task's

LOGONID as is normally done.

When processing these calls, a loop may occur on CICS

Resource Check (XSRC) calls that specify FOR(userid)

that is the same as the current TRANSACTION_USER. If

the current task is not terminal related, and the

FOR(userid) ACEE is the same as that of the

TRANSACTION_USER, and the resource being validated is

not found in the user's session cache buffer from a

prior validation, a loop of ACFAERUL issuing ACF2 SVC-A

ACGRSRC Resource Validation calls will result. This

has been reported for CICS Transaction code validation

in a WEB Services environment.

SYMPTOMS:

Possible:

Region hang

AICA trasaction abends

Excessive SMF data if the Resource Check logs the access.

IMPACT:

Possible region outage.

CIRCUMVENTION:

None


CICS/TS Interface for CA ACF2 FOR Z/OS Release 15.0

Star Problem(s):

ACF2MS 9629


DESC(CICS: REGION HANG/LOOP ON FOR_USERID XSRC CALL) .

++VER (Z038)

FMID (CAX1F03)

PRE ( RO31705 RO32495 RO46083 RO59229 )

SUP ( AR59229 AR67560 RO67560 TR67560 TR68922 )



COMMENT (

+----------------------------------------------------------------------+

| CA-ACF2-MVS CICS Release 15.0 |

+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Enable updated code |

+----------+-----------------------------------------------------------+

|USERS | All Users |

|AFFECTED | |

+----------+-----------------------------------------------------------+

|KNOWLEDGE | Linklist contents (optional) |

|REQUIRED | Console commands |

+----------+-----------------------------------------------------------+

|ACCESS | CICS Region |

|REQUIRED | ACFE Trransaction |

+----------+-----------------------------------------------------------+

**************************

CA ACF2 15.0 18


Release Service Details* STEPS TO PERFORM *

**************************

1. Perform an LLA REFRESH (if applicable)

2. Issue CICS transaction:

ACFE=NEWC=CAKSRVAL

).

CA ACF2 15.0 19




ACFESAGE HAS INVALID $USERDATA DISPLAY


If the $USERDATA contains open/close parens, the output stops

at the first close parentheses. This will truncate the data.

SYMPTOMS:

The flat file will contain truncated $USERDATA.

IMPACT:

Invalid data.

CIRCUMVENTION:

none.



Star Problem(s):

ACF2MS 9631


DESC(ACFESAGE HAS INVALID $USERDATA DISPLAY) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO19351 RO21351 RO21734 RO26996 RO36463 RO39136

RO44641 RO47863 RO58433 RO63347 )

SUP ( RO27780 RO54224 RO56898 RO61666 RO64768 RO66603

RO68723 TR27780 TR54224 TR56898 TR61666 TR64768

TR66603 TR68432 TR68723 TR68980 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Dynamic installation of this fix. |

+----------+-----------------------------------------------------------+

|USERS | All Users. |

|AFFECTED | |

+----------+-----------------------------------------------------------+

|KNOWLEDGE | Operator commands. |

|REQUIRED | |

+----------+-----------------------------------------------------------+

|ACCESS | z/OS Operator console. |

|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. Perform an LLA REFRESH.

).

CA ACF2 15.0 20




PTKTDATA RECORD CAN BE INSERTED WITH NO SSKEY


PassTicket processing erroneously allows PTKTDATA profile

records to be inserted with no SSKEY value. This APAR

changes ACF command processing as follows:

1) INSERT subcommand will require SSKEY for PTKTDATA records

2) CHANGE subcommand will require SSKEY if PTKTDATA record lacks one

3) LIST subcommand will display SSKEY(*SUPPRSSED*) for PTKTDATA

records that have an SSKEY field.

The change to LIST processing will allow administrators to

determine if existing PTKTDATA profile records have an SSKEY.

If LIST displays SSKEY(*SUPPRSSED*) then an SSKEY value is

present; if no SSKEY data is displayed then the PTKTDATA

profile record has no SSKEY field in it. If a PTKTDATA record

is lacking an SSKEY it should be changed to specify one. This

change may need to be coordinated with other systems using

PassTickets.

SYMPTOMS:

The ACF INSERT subcommand completes with no error when SSKEY

is omitted on a PTKTDATA profile record insert.

IMPACT:

PTKTDATA profile record may be inserted with no SSKEY. This

condition is impossible for administrators to detect because

the LIST subcommand does not display the SSKEY field for

PTKTDATA profile records.

CIRCUMVENTION:

Specify an SSKEY value when inserting PTKTDATA profile records.



Star Problem(s):

ACF2MS 9633


DESC(PTKTDATA RECORD CAN BE INSERTED WITH NO SSKEY) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO36462 RO45722 RO54825 RO54826 RO54834 )

SUP ( TR68998 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|USERS | PassTicket users |

|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. Issue operator command 'F LLA,REFRESH'.

2. Issue operator command 'F ACF2,NEWMOD(ACF00SVA)'.

CA ACF2 15.0 21


Release Service Details3. Issue operator command 'F ACF2,NEWMOD(ACFOEADM)'.

).

CA ACF2 15.0 22




SAF EXTRACT PWPHRASE I/O WHEN OPTION NOT ENABLED


Code added for RACROUTE EXTRACT for fields that included PWPHRASE

is issuing the ACF2 SVC to try and locate a user profile record

for the Passphrase when the GSO PWPHRASE option is turned off and

the userid is not enabled for PWPHRASE processing. The ACF2 SVC

call to retrieve the user profile record will only be issued if

both conditions are meet.

SYMPTOMS:

Accessive I/O to the INFOSTG database.

IMPACT:

Performance.

CIRCUMVENTION:

None.

PRODUCT(S) AFFECTED: CA ACF2

Star Problem(s):

ACF2MS 9634


DESC(SAF EXTRACT PWPHRASE I/O WHEN OPTION NOT ENABLED) .

++VER (Z038)

FMID (CAX1F00)


RO68280 )

SUP ( TR17283 TR17308 TR20945 RO20945 TR26131 RO26131

TR33002 TR33050 TR33080 RO33080 TR34727 TR37808 TR41922

TR42041 RO34727 RO37808 RO42041 TR47622 RO47622 TR48295

RO48295 TR51345 RO51345 TR56644 TR60367 AR60393 TR65152

RO56644 RO60367 RO65152 TR68993 TR69075 )


REASON (ACTION ) DATE (14097)

COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Describe requirements and steps required to install |

| | this fix. |

+----------+-----------------------------------------------------------+

|USERS | |

|AFFECTED | All users |

+----------+-----------------------------------------------------------+

|KNOWLEDGE | |

|REQUIRED | SMP/E Experience |

+----------+-----------------------------------------------------------+

|ACCESS | |

|REQUIRED | Access to ACF2 loadlibs |

+----------+-----------------------------------------------------------+

**************************


**************************

1. SMP APPLY the fix.

2. Issue operator command 'F LLA,REFRESH'.

3. Issue operator command 'F ACF2,NEWMOD(ACF9C000)'.

).

CA ACF2 15.0 23




ALLOW SAF EXTRACT APPLDATA FOR SERVAUTH AND TMEADMIN


RACROUTE EXTRACT for APPLDATA associated with either

class SERVAUTH or class TMEADMIN fails.

SYMPTOMS:

EXTRACT for APPLDATA fails.

IMPACT:

The APPLDATA for the RACROUTE EXTRACT call is not returned.

CIRCUMVENTION:

None



Star Problem(s):

ACF2MS 9635


DESC(ALLOW SAF EXTRACT APPLDATA FOR SERVAUTH AND TMEADMIN) .

++VER (Z038)

FMID (CAX1F00)


RO69075 )


TR33002 TR33050 TR33080 RO33080 TR34727 TR37808 TR41922

TR42041 RO34727 RO37808 RO42041 TR47622 RO47622 TR48295

RO48295 TR51345 RO51345 AR60393 RO56644 RO60367 RO65152

TR56644 TR60367 TR65152 TR69144 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. F LLA,Refresh


).

CA ACF2 15.0 24




RULE LINE WITH DATA PARM NOT PARSED CORRECTLY


If the Rule Line contains a DATA parm which has OPEN/CLOSE parens

within it the data is not parsed correctly. The parser ends at the

first CLOSE paren, truncating the DATA field.

SYMPTOMS:

ACFESAGE output is incorrect.

IMPACT:

ACFESAGE output is incorrect.

CIRCUMVENTION:

None.



Star Problem(s):

ACF2MS 9637


DESC(RULE LINE WITH DATA PARM NOT PARSED CORRECTLY) .

++VER (Z038)

FMID (CAX1F00)


RO44641 RO47863 RO58433 RO63347 )

SUP ( RO27780 RO54224 RO56898 RO61666 RO64768 RO66603

RO68723 RO68980 TR27780 TR54224 TR56898 TR61666

TR64768 TR66603 TR68432 TR68723 TR68980 TR69234 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+

|PURPOSE | Dynamic installation of this fix. |

+----------+-----------------------------------------------------------+

|USERS | All Users. |

|AFFECTED | |

+----------+-----------------------------------------------------------+

|KNOWLEDGE | Operator commands. |

|REQUIRED | |

+----------+-----------------------------------------------------------+

|ACCESS | z/OS Operator console. |

|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. Perform an LLA REFRESH.

).

CA ACF2 15.0 25




LOOP IN ACF04RSC TRYING TO STORE A LONG DB2 RULE KEY


There is a possibility of going into a loop

in ACF04RSC when trying to store a DB2 ruleset

that has a long rulekey. It does not happen

for all STOREs of long resource keys. It all

depends upon the value of the rulekey being stored

and rulesets already in the database.

SYMPTOMS:

Loop in ACF04RSC trying to STORE the rule.

IMPACT:

Cannot STORE the rule and the address space goes into a loop.

CIRCUMVENTION:

Change the ruleset so the $KEY is not a long resource.

The $KEY can be made to be only the high level qualifier

and the extended resource name is on the ruleline.



Star Problem(s):

ACF2MS 9638


DESC(LOOP IN ACF04RSC TRYING TO STORE A LONG DB2 RULE KEY) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO61511 )

SUP ( TR69326 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. Refresh LLA

2. F ACF2,NEWMOD(ACF00SVA)

).

CA ACF2 15.0 26




LIST PROFILE(ALL) INCOMPLETE


When the LIST subcommand is issued with operand PROFILE(ALL) it

does not display newly inserted profile records.

SYMPTOMS:

LIST with PROFILE(ALL) omits newly inserted profile records.

IMPACT:

Security administrators do not get accurate results when LIST

with PROFILE(ALL) is issued after inserting profile records.

CIRCUMVENTION:

If possible issue a rebuild of the PUSR directory before

attempting to LIST profile records using PROFILE(ALL), or

go into PROFILE mode and LIST the records.



Star Problem(s):

ACF2MS 9640


DESC(LIST PROFILE(ALL) INCOMPLETE) .

++VER (Z038)

FMID (CAX1F00)

PRE ( RO38736 RO49693 RO54949 )

SUP ( TR68196 RO68196 TR69441 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

LLA Refresh

).

CA ACF2 15.0 27




POSSIBLE OVERLAY ON AN EXTRACT OF BAD DATA IN OMVS PROGRAM


On an EXTRACT for the OMVSPGM field, there is a potential

for an overlay if the OMVSPGM field either has bad data

in it or has been overlaid in storage.

If the field that contains the users OMVSPGM has bad data

either in the database or in storage, we may overlay the

storage that follows the area returned to the extract

caller.

This maintenance will prevent the overlay from ocurring

in this situation and will add better diagnostics in order

to solve why the record is bad.

SYMPTOMS:

Overlay of storage. The storage that is overlayed is

determined by the key and subpool passed in by the caller

of the extract call.

IMPACT:

Possible IPL depending upon what gets overlaid.

CIRCUMVENTION:

None



Star Problem(s):

ACF2MS 9643


DESC(POSSIBLE OVERLAY ON AN EXTRACT OF BAD DATA IN OMVS PROGRAM) .

++VER (Z038)

FMID (CAX1F00)


RO69075 )


TR33002 TR33050 TR33080 RO33080 TR34727 TR37808 TR41922

TR42041 RO34727 RO37808 RO42041 TR47622 RO47622 TR48295

RO48295 TR51345 RO51345 TR56644 TR60367 AR60393 TR65152

RO56644 RO60367 RO65152 TR69144 RO69144 TR69704 EC55970 )



COMMENT (

+----------------------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


+----------+-----------------------------------------------------------+


|AFFECTED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+


|REQUIRED | |

+----------+-----------------------------------------------------------+

**************************


**************************

1. F LLA,Refresh


).

Documents

CA ACF2 15.0 CA RS 1405 Service List · CA ACF2 4 CA RS 1405 Service List for CAX1F03 FMID Service Description Hiper CAX1F03 RO68914 CICS: XCMD VALIDATION FOR JESSPOOL ON INQUIRE