IBM Support

DFHXS1500 on EXEC CICS REQUEST PASSTICKET command when using CA Top Secret

Question & Answer


Question

Why is my application is receiving message DFHXS1500 when trying to issue command EXEC CICS REQUEST PASSTICKET?

DFHXS1500 date time applid A PassTicket request for task userid (userid) with ESM application name (esmappname) failed because the request is not authorized by the ESM. Taskid (taskid) Tranid (tranid)

I coded the CICS Transaction Server for z/OS (CICS TS) system initialization table (DFHSIT) with XPTKT=YES. But, I noticed when viewing a dump of the CICS region, the PA Domain indicates XPTKT=NO is coded. The only way I am able to get the CICS region to keep XPTKT=YES is to put it within the SYSIN overrides. However, even then the application fails with the same error message.

I am using CA Top Secret from CA Technologies as my security manager.

Answer

CA Top Secret was overriding the XPTKT parameter because all of the permissions had not been setup:

  • The userid (or ACID) running the transaction requesting the passticket must have UPDATE access to profile IRRPTAUTH.applid.userid in the PTKTDATA class.

  • The userid (or ACID) that the CICS region runs under also requires access to the PTKTGEN resource in PTKTDATA.

See Generating and using RACF PassTickets in the CICS TS documentation for additional information.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"Security","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

CICS/TS CICSTS CICS TS CICS Transaction Server

Document Information

Modified date:
17 January 2018

UID

dwa1416413