IBM Support

PI21866: SUPPORT FOR THE RACF ENHANCED PASSWORD ALGORITHM

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • This change supports the Enhanced Password Algorithm implemented
in the RACF APAR OA43999 which applies to z/OS 1.12, 1.13
and 2.1.

Local fix

  • 



Problem summary


    

  • ****************************************************************
* USERS AFFECTED: All CICS Users                               *
****************************************************************
* PROBLEM DESCRIPTION: This change supports                    *
*                      the Enhanced Password Algorithm         *
*                      implemented in the                      *
*                      RACF APAR OA43999 which applies to      *
*                      z/OS 1.12, 1.13 and 2.1.                *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
This change supports the Enhanced Password Algorithm
implemented in the
RACF APAR OA43999 which applies to
z/OS 1.12, 1.13 and 2.1.
If these APARs are installed CICS will call a new
callable service IRRSPW00 to for password authentication.
This service will be used for basic authentication requests,
VERIFY PASSWORD, VERIFY PHRASE and SIGNON requests.
The service will run on open TCBs, or will switch to an L8
TCB rather than the RO TCB.
The use of the Enhanced Password capability is described
in the RACF documentation.

Additional Keywords: RACFPWENCR/K

    



Problem conclusion


    

  • This change supports the Enhanced Password Algorithm
implemented in the
RACF APAR OA43999 which applies to z/OS 1.12, 1.13 and 2.1.

The use of the Enhanced Password capability is described
in the RACF documentation.

Documentation Changes
CICS TS 5.1
No doc required as MAXOPENTCBS was removed.

CICS TS 5.2
The CICS Transaction Server for z/OS V5.2: System Definition
Guide (SC34-7293-00)
http://www-01.ibm.com/support/knowledgecenter/SSGMCP_5.2.0/
com.ibm.cics.ts.doc/dfha2/parameters/dfha2_maxopentcbs.html
CICS uses L8 TCBs when authenticating a password,
password phrase or kerberos token when the original request
was on the QR TCB.

In the section calculating a value for OPENTCBs, add
The peak number of authentication requests
(basic authentication or kerberos, using web or
web service requests, VERIFY and SIGNON requests).

    



Temporary fix


    

  • FIX AVAILABLE BY PTF ONLY

    



Comments


    

  • ×**** PE15/02/16 FIX IN ERROR. SEE APAR PI33454  FOR DESCRIPTION
×**** PE15/07/06 FIX IN ERROR. SEE APAR PI44336  FOR DESCRIPTION
×**** PE15/10/08 FIX IN ERROR. SEE APAR PI35981  FOR DESCRIPTION
×**** PE15/11/10 FIX IN ERROR. SEE APAR PI35981  FOR DESCRIPTION
×**** PE15/08/07 FIX IN ERROR. SEE APAR PI46508  FOR DESCRIPTION
×**** PE16/05/13 FIX IN ERROR. SEE APAR PI46508  FOR DESCRIPTION
×**** PE17/01/26 FIX IN ERROR. SEE APAR PI70500  FOR DESCRIPTION
×**** PE17/02/10 FIX IN ERROR. SEE APAR PI67905  FOR DESCRIPTION

    



APAR Information




    

  • APAR number
    PI21866
    • 

  • Reported component name
    CICS TS Z/OS V5
    • 

  • Reported component ID
    5655Y0400
    • 

  • Reported release
    800
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2014-07-11
    • 

  • Closed date
    2014-10-29
    • 

  • Last modified date
    2017-02-10
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
UI22616 UI22617 UI22618 UI22619
    

    • 



Modules/Macros


    

  • EYU0VBPC

    




Publications Referenced


SC34729300    





Fix information


    

  • Fixed component name
    CICS TS Z/OS V5
    • 

  • Fixed component ID
    5655Y0400
    • 



Applicable component levels


    

  • R80M  PSY  UI22617
       UP14/11/05  P  F411
    • 

  • R800  PSY  UI22616
       UP14/11/05  P  F411
    • 

  • R90M  PSY  UI22619
       UP14/11/05  P  F411
    • 

  • R900  PSY  UI22618
       UP14/11/05  P  F411
    • 



Fix is available


    

  • Select the PTF appropriate for your component level.
You will be required to sign in. Distribution on physical
media is not available in all countries.
    








      
              
                            

              

              [{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"","label":""}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            10 February 2017
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback