IBM Support

PI21866: SUPPORT FOR THE RACF ENHANCED PASSWORD ALGORITHM

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • This change supports the Enhanced Password Algorithm implemented
    in the RACF APAR OA43999 which applies to z/OS 1.12, 1.13
    and 2.1.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All CICS Users                               *
    ****************************************************************
    * PROBLEM DESCRIPTION: This change supports                    *
    *                      the Enhanced Password Algorithm         *
    *                      implemented in the                      *
    *                      RACF APAR OA43999 which applies to      *
    *                      z/OS 1.12, 1.13 and 2.1.                *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    This change supports the Enhanced Password Algorithm
    implemented in the
    RACF APAR OA43999 which applies to
    z/OS 1.12, 1.13 and 2.1.
    If these APARs are installed CICS will call a new
    callable service IRRSPW00 to for password authentication.
    This service will be used for basic authentication requests,
    VERIFY PASSWORD, VERIFY PHRASE and SIGNON requests.
    The service will run on open TCBs, or will switch to an L8
    TCB rather than the RO TCB.
    The use of the Enhanced Password capability is described
    in the RACF documentation.
    
    Additional Keywords: RACFPWENCR/K
    

Problem conclusion

  • This change supports the Enhanced Password Algorithm
    implemented in the
    RACF APAR OA43999 which applies to z/OS 1.12, 1.13 and 2.1.
    
    The use of the Enhanced Password capability is described
    in the RACF documentation.
    
    Documentation Changes
    CICS TS 5.1
    No doc required as MAXOPENTCBS was removed.
    
    CICS TS 5.2
    The CICS Transaction Server for z/OS V5.2: System Definition
    Guide (SC34-7293-00)
    http://www-01.ibm.com/support/knowledgecenter/SSGMCP_5.2.0/
    com.ibm.cics.ts.doc/dfha2/parameters/dfha2_maxopentcbs.html
    CICS uses L8 TCBs when authenticating a password,
    password phrase or kerberos token when the original request
    was on the QR TCB.
    
    In the section calculating a value for OPENTCBs, add
    The peak number of authentication requests
    (basic authentication or kerberos, using web or
    web service requests, VERIFY and SIGNON requests).
    

Temporary fix

  • FIX AVAILABLE BY PTF ONLY
    

Comments

  • ×**** PE15/02/16 FIX IN ERROR. SEE APAR PI33454  FOR DESCRIPTION
    ×**** PE15/07/06 FIX IN ERROR. SEE APAR PI44336  FOR DESCRIPTION
    ×**** PE15/10/08 FIX IN ERROR. SEE APAR PI35981  FOR DESCRIPTION
    ×**** PE15/11/10 FIX IN ERROR. SEE APAR PI35981  FOR DESCRIPTION
    ×**** PE15/08/07 FIX IN ERROR. SEE APAR PI46508  FOR DESCRIPTION
    ×**** PE16/05/13 FIX IN ERROR. SEE APAR PI46508  FOR DESCRIPTION
    

APAR Information

  • APAR number

    PI21866

  • Reported component name

    CICS TS Z/OS V5

  • Reported component ID

    5655Y0400

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2014-07-11

  • Closed date

    2014-10-29

  • Last modified date

    2016-05-13

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI22616 UI22617 UI22618 UI22619

Modules/Macros

  • EYU0VBPC
    

Publications Referenced
SC34729300        

Fix information

  • Fixed component name

    CICS TS Z/OS V5

  • Fixed component ID

    5655Y0400

Applicable component levels

  • R80M PSY UI22617

       UP14/11/05 P F411

  • R800 PSY UI22616

       UP14/11/05 P F411

  • R90M PSY UI22619

       UP14/11/05 P F411

  • R900 PSY UI22618

       UP14/11/05 P F411

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Document information

More support for: CICS Transaction Server

Software version: 5.1

Reference #: PI21866

Modified date: 13 May 2016