IBM Support

OA65342: ZSECURE MERGE FUNCTION DOES NOT SUPPORT PHRASEINT AND GENERATES INVALID RACF COMMANDS

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • zSecure MERGE function does not support PHRASEINT and generates
    invalid RACF commands.  User is attempting a MERGE function, and
    The command generated has invalid content:
    
    ALTUSER xxxxxx NOSPECIAL NOOPERATIONS NOAUDITOR
    <Other:PHRINT; value:003C0000>
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin exploiting the MERGE  *
    *                 function.                                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin generates incorrect       *
    *                      commands in cases where RACF user       *
    *                      profiles have password phrase interval  *
    *                      value defined.                          *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When the MERGE function is applied to RACF databases where user
    profiles have password phrase interval values defined, the
    ALTUSER commands generated by zSecure Admin for such profiles
    are incorrect.
    

Problem conclusion

  • zSecure Admin has been modified, so that the MERGE function
    generates correct ALTUSER commands for profiles with password
    phrase interval defined.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA65342

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    250

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2023-08-09

  • Closed date

    2023-09-01

  • Last modified date

    2023-10-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ93630

Modules/Macros

  • CKRMRG1  CKRMRGC  CKRMRGF  CKRMRGP  GKRMRG1  GKRMRGC  GKRMRGF
    GKRMRGP
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ93630

       UP23/09/02 P F309

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
02 October 2023