Second EXEC CICS QUERY PASSWORD signon failed by Top Secret

Products

• Top Secret

Issue/Introduction

CICS application issuing two API call is EXEC CICS VERIFY PASSWORD(the-password) USERID(the-userid).

First one is successful. Second one receives a NOTAITH + RESP2(19)

TSSUTIL reveals a DRC 14 security violation.

 

 

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

If SIGN(S) is set for CICS FACILITY which means user is only allowed to signon once, a second signon within the same address space will failed.

The first signon  will be allowed, the second signon will receive a DRC 14 (multiple signons not allowed).

Change to FACILITY control option SIGN(M) to allow multiple signons.