Question & Answer
Question
SPI(WLMHEALTH) in CA Top Secret returns message: TSS0244E INVALID SUBFIELD LENGTH FOR KEYWORD - SPI. In RACF, what is the resource name in the SPI check for WLM Health? I expect Top Secret's to be the same, but maybe RACF is using WLMHEALTH and thus, I would need to open a problem with CA Technologies.
In preparing for our initial deployment of CICS Transaction Sever for z/OS (CICS TS) V5.4, I have been working with my security team to get various permissions in place (CEDG, CEDY, CEPR, SPI check on MQMON, etc.). However, I am bit stuck on the SPI check for WLMHEALTH.
Hopefully, you have a simple answer though (like MQMON for the MQ Monitor).
Answer
First of all, ensure the PTFs for CICS Transaction Server for z/OS (CICS TS) V5.4 APARs PI84397 and PI83933 have been applied. These APARs affect command security checking for the WLMHEALTH resource. Prior to PI84397, the ASSOCIATION resource was being used instead of WLMHELATH.
See the CICS TS V5.4 Fix List for these APARs and their PTFs.
The command checking resource names are described in topic CICS resources subject to command security checking in the CICS TS V5.4 documentation
For CA Top Secret, the command resource names are limited to 8 characters in length, so for Top Secret, the resource would drop the trailing "H" and be defined as "WLMHEALT".
Product Synonym
CICS/TS CICSTS CICS TS CICS Transaction Server
Was this topic helpful?
Document Information
Modified date:
27 October 2017
UID
dwa1407497