IBM Support

OA48359: NEW FUNCTION - MULTI-FACTOR AUTHENTICATION SUPPORT

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as new function.

Error description

  • Support for multi-factor authentication in conjunction with the
    new IBM Multi-factor Authentication for z/OS product
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: RACF administrators who wish to enforce      *
    *                 stronger authentication.                     *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Support for multi-factor authentication is being added to RACF.
    
    A new document has been created to document the enhanced
    function in this APAR.
    'APAR OA48359 - RACF Multi-Factor Authentication Support'
    
    This document can be found and downloaded from the following
      location:
    
    ftp://ftp.software.ibm.com/s390/zos/racf/pdf/oa48359.pdf
    
    The following RACF publications have changes to support this
    apar.
    
    z/OS Security Server RACF Security Administrator's Guide
     (SA232289xx)
    
    z/OS Security Server RACF Command Language Reference
     (SA232292xx)
    
    z/OS Security Server RACF Auditor's Guide
     (SA232290xx)
    
    z/OS Security Server RACROUTE Macro Reference
     (SA232294xx)
    
    z/OS Security Server RACF Callable Services
     (SA232293xx)
    
    z/OS Security Server RACF Macros and Interfaces
     (SA232288xx)
    
    z/OS Security Server RACF Data Areas
     (GA320885xx)
    
    z/OS Security Server RACF Messages and Codes
     (SA232291xx)
    
    z/OS Security Server RACF General User's Guide
     (SA232298xx)
    

Problem conclusion

Temporary fix

Comments

  • The RACF database templates are changed with this APAR. The
    updated version string is:
    
    $/VERSION OA48359 00000199.00000032
    
    As part of this enhancement, new keywords are added to the
    ALTUSER command.
    
    Note that neither ISPF panel nor TSO HELP support is provided
    for the new command keywords.
    
    Note that when commands are propagated in an RRSF network,
    command behavior on the target system depends on the release
    and service level in effect on the target system.
    
    The following fix category keyword identifies this APAR as
    pertaining to multi-factor authentication:
    
    MFA/K
    ×**** PE16/09/09 FIX IN ERROR. SEE APAR OA51211  FOR DESCRIPTION
    

APAR Information

  • APAR number

    OA48359

  • Reported component name

    RACF

  • Reported component ID

    5752XXH00

  • Reported release

    7A0

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2015-07-09

  • Closed date

    2016-03-08

  • Last modified date

    2016-09-30

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA90988 UA90989

Modules/Macros

  • HRF77A0J HRF7790J ICHCAU00 ICHCCU00 ICHCCU01
    ICHCDX43 ICHCDX44 ICHCLU00 ICHCOP00 ICHIACEE ICHIRCVT ICHRAU00
    ICHRAU02 ICHRAU03 ICHRAU05 ICHRIN00 ICHRIN02 ICHRRCDX ICHSEC07
    ICHSGF00 IRRADULD IRRADUTB IRRADUX1 IRRADU00 IRRADU01 IRRADU10
    IRRADU20 IRRCCU0P IRRCLU0P IRRCOP25 IRRDBU03 IRRDPE00 IRRDPE01
    IRRDPSDS IRRENV00 IRRFRN00 IRRISTCB IRRMFAPC IRRMGR03 IRRPAR20
    IRRPAR40 IRRREQTB IRRREQ01 IRRRFACU IRRRFA01 IRRRFA02 IRRRFA03
    IRRRFA04 IRRRFA64 IRRRFR10 IRRRIA00 IRRRIN17 IRRRIN22 IRRRIN28
    IRRRPC01 IRRSCHEM IRRSETV1 IRRSETV2 IRRSETV3 IRRTEMP2 IRRTRC00
    IRRTRC01 IRRVMFA0 IRRWMFPC IRRXTR01 RACDBULD RACDBUTB
    

Publications Referenced
SA23228900 SA23228800 SA23229200 GA32088500 SA23229000
SA23229100 SA23229300 SA23229800 SA23229400  

Fix information

  • Fixed component name

    RACF

  • Fixed component ID

    5752XXH00

Applicable component levels

  • R7A0 PSY UA90989

       UP16/03/24 P F603

  • R790 PSY UA90988

       UP16/03/24 P F603

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Document information

More support for: z/OS family

Software version: 7A0

Operating system(s): MVS, z/OS

Reference #: OA48359

Modified date: 30 September 2016