IBM Support

II14765: SUPPORT INFORMATION REGARDING RACF PASSWORD SECURITY ENHANCEMENTS OA43998 AND OA43999

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • INTRAN

Error description

  • Password Security Enhancements have been made available via SAF
    APAR OA43998 and RACF APAR OA43999.                   5752XXH00
    
    RACF documentation on setup, planning, performance, etc:
    http://www-01.ibm.com/support/knowledgecenter/SSLTBW_2.2.0/com.i
    bm.zos.v2r2.icha200/icha20091a.htm?lang=en
    
    Two fix categories have been defined to group the service
    updates required to activate this support across all affected
    products.  Run REPORT MISSINGFIX for Fix Categories
    IBM.Function.RACF.PasswordCharacters and
    IBM.Function.RACF.PasswordEncryption periodically to investigate
    missing recommended service.
    
    The support contained within this package may not be fully
    supported by all products in your installation.
    
    This APAR lists restrictions when the new support is enabled.
    It will be updated if additional restrictions are identified.
    
    ++++++++++++++++ Restrictions
    IMS Connect provides full special character support with
    APAR PI48112.
    IMS (e.g., commands, VTAM logon, etc) provides full special
    characters support with APAR PI48111.
    
    NetView FTP does not support the KDFAES encryption algorithm if
    the parameters
    SSECURP=('*','*') and/or RSECURP=('*','*') are used.
    
    Tivoli NetView for z/OS does not accept the period '.' character
    or the equal sign '=' character in passwords defined through
    Netview services using DSIOPFx.
    
    TSO/E will not accept a password that begins with a question
    mark '?' character.
    
    z/OS CommServer users should avoid using the colon ':' character
    in passwords passed to the z/OS FTP server.
    
    zVM 6.3 support for KDFAES (and other enhancements) is available
    with VM65719. If you are sharing the RACF database between a
    z/OS and z/VM system, do not activate KDFAES until the service
    is applied on both operating systems.
    
    BDT at release HBD6602 shipped support in PTF UA77241
    
    ++++++++++++++++ End of restrictions
    
    ++++++++++++++++ Additional Support
    CICS 5.3 fixes: PI64443
    
    CICS 5.1 and 5.2 initial support came in APAR PI21866.
    Additional fixes: PI33454, PI39336, PI44336, PI64442
    
    CICS 4.2 initial support came in APAR PI21865. Additional
    fixes: PI33451, PI44380, PI64175
    
    RMF PM does not support a vertical bar '|' character or
    an exclamation mark '!' character in passwords.
    
    Related RACF Support:
    OA46776 OA46777 OA48304 OA48859 OA50846 OA50748
    
    Note regarding RACF performance APAR OA50748:
    The following applications provide exploitation
    of APAR OA50748 to provide performance relief.
    
    CICS 5.3: PI64443
    CICS 5.1 and CICS 5.2: PI65442
    CICS 4.2: PI64175
    
    ++++++++++++++++ End of Additional Support
    

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    II14765

  • Reported component name

    V2 LIB INFO ITE

  • Reported component ID

    INFOV2LIB

  • Reported release

    001

  • Status

    INTRAN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2014-10-24

  • Closed date

  • Last modified date

    2017-01-12

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels



Document information

More support for: z/OS family

Software version: 001

Operating system(s): MVS, OS/390, z/OS

Reference #: II14765

Modified date: 12 January 2017