IBM Support

No passtickets and CCVS003 when accessing CICS CM from ISPF using authenticated port

Question & Answer


Question

I have been using CICS Configuration Manager for z/OS (CICS CM) V5.3 on the unauthenticated TCPIPSERVICE CCVNONE and recently switched to the authenticated port CCSBASIC. When I attempt to access CICS CM from e ISPF dialog using the authenticated port, I get ISPF short message "No passtickets". If I use PF1, it shows long MSGID CCVS003 'A request to generate a passticket failed. Set up of the CICS Configuration Manager security environment may be incomplete.'

My security administrator has reviewed the CICS CM documentation topic Optional: Enable PassTicket processing and everything appears to be setup correctly to enable passticket processing...

Any suggestions on what else to check as to why I am getting the "No passtickets" message?

Answer

If you are using RACF request your security administrator run the following commands to confirm access:

1) SETROPTS LIST

2) LISTUSER userid where userID is the user who is trying to authenticate with a passticket

3) LISTUSER userid where the userID is the application userID

4) RLIST PTKTDATA your_CICS_CM_server_applid> AUTH

5) SEARCH CLASS(PTKTDATA) NOMASK

6) RLIST PTKTDATA * AUTH SSIGNON

If after reviewing the output from these commands, your RACF admin does not spot a problem you would next need to obtain a SAF trace using the following instructions:

 To Activate the RACF GTF Trace:
  - start GTF with a dataset and the parms:
     TRACE=USRP
     USR=(F44)
     END
  - enter console command:
     @SET TRACE( JOBNAME(jobnam*)
                 RACROUTE(TYPE(1,2,5,9))
                 CALLABLE(TYPE(43,50))
                )  LIST
  - From above, substitute jobnam* with the name of the TSO USER job and reproduce the "No passtickets" message from the ISPF dialog.
 
 To Deactivate it:
  - enter console command:
     @SET TRACE( NOJOBNAME NORACROUTE NOCALLABLE )  LIST
  - stop GTF, collect the trace dataset.
 Terse/FTP the trace to IBM.
 NOTE:  the "@" represents the subsystem cmd prefix you assigned to RACF
        using the INITPARM value of your IEFSSNxx data.

For more information see Rules for entering RACF operator commands.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SS2L7A","label":"CICS Configuration Manager for z\/OS"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

CICSCM CICS CM

Document Information

Modified date:
17 February 2017

UID

dwa1357236