IBM Support

PI54038: ICON SUPPORT FOR RACF SPECIAL CHARACTERS.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • RACF now supports an extended set of special characters which
    IMS/ICON does not currently support.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All IMS V13 IMS Connect users that have      *
    *                 RACF security enabled to authenticate        *
    *                 TCP/IP connections.                          *
    ****************************************************************
    * PROBLEM DESCRIPTION: IMS Connect does not allow the new      *
    *                      special password characters supported   *
    *                      by RACF.                                *
    *                                                              *
    *                      Retro-fit of PI48112.                   *
    ****************************************************************
    * RECOMMENDATION: INSTALL CORRECTIVE SERVICE FOR APAR/PTF      *
    ****************************************************************
    RACF has introduced 14 special characters that can be used
    in RACF passwords. IMS Connect currently treats those
    special characters as invalid for RACF passwords.
    Below are the new special characters supported by RACF.
    The symbols shown are for EBCDIC code page 1047 or 037.
    IMS Connect uses EBCDIC code page 037 when validating the
    password characters.
    Special Characters (EBCDIC):
    4B 4C 4E 4F 50 5A 5C 60 6C 6D 6E 6F 7A 7E  <-- Hex value
     .  <  +  |  &  !  *  -  %  _  >  ?  :  =  <-- Symbol
    The special characters are in addition to the existing
    national characters:
    5B 7B 7C
     $  #  @
    

Problem conclusion

Temporary fix

Comments

  • Via this APAR, IMS Connect Version 13 will allow passwords,
    sent by TCP/IP clients, that contain the new special characters
    supported by RACF. Please take a look at the documentation
    changes for more information about the new special characters.
    
    This APAR adds support for the special characters to IMS
    Connect only. APAR PI54037 adds support for the special
    characters to IMS 13. Additional service for IMS Connect
    clients might be required to enable the client support for the
    special characters. APAR PI57031 adds the support to the
    IMS Universal Drivers. APAR PI52846 adds the support to
    IMS Enterprise Suite Connect API for Java.
    The following IBM provided IMS Connect TCP/IP clients do not
    need additional service:
    - IMS Enterprise Suite SOAP Gateway
    - IMS Transaction Manager (TM) Resource Adapter
    
    Clients must pass the special characters to
    IMS Connect by using the appropriate hexadecimal values. Before
    enabling special character support in RACF, you should make
    sure all your IMS Connect systems have this APAR applied and
    that all your IMS Connect TCP/IP clients support sending
    password with special characters.
    
    Please note that support for LOCAL port is not enhanced. Thus,
    IMS Transaction Message Resource Adapter using the LOCAL port
    is not supported.
    
    Also note that you should expect unpredictable results if you
    have enabled special character support in RACF and you have
    systems running mixed versions of IMS Connect and/or
    IMS Connect systems without this APAR. The support
    provided via this APAR is only for IMS Connect Version 13.
    
    The following IMS Connect parts have been enhanced to allow the
    use of the new special characters when validating a RACF
    password provided by a TCP/IP client:
    
    HWSMDRCV: Allow special characters for DRDA clients
    HWSPWCH0: Allow special characters for password change requests
    HWSSDRCV: Allow special characters for TCP/IP clients
    
    
    
                     --------------------------
                      DOCUMENT CHANGES FOLLOW:
                     --------------------------
    SRLs
    SC19365100
    GC19365800
    
    -------------------
    SC19-3651-00
    SC19365100
    
    In: IMS V13 Communications and Connections
    Under: "Format of user portion of IRM for HWSSMPL0, HWSSMPL1,
    and user-written message exit routines"
    
    Please add to the table "User portion of IRM for HWSSMPL0,
    HWSSMPL1, and user-written user message exits"
    the information below into the "Meaning" column for the row
    with field "IRM_RACF_PW"
    
    The password may contain any of the special characters shown
    below. IMS Connect uses EBCDIC code page 037 to perform
    password character validation. The symbols shown apply to
    EBCDIC code page 1047 and 037.
    
    Special Characters (EBCDIC):
    4B 4C 4E 4F 50 5A 5C 60 6C 6D 6E 6F 7A 7E  <-- Hex value
     .  <  +  |  &  !  *  -  %  _  >  ?  :  =  <-- Symbol
    The special characters are in addition to the existing
    national characters:
    5B 7B 7C
     $  #  @
    -------------------
    
    
    
    -------------------
    GC19-3658-00
    GC19365800
    
    Under IMS V13:
    Release Planning
      IMS Version 13 enhancements
       IMS system enhancements
    
    Add a new section:
    "IMS Connect Support of RACF Special Characters"
    
    With summary:
    IMS Connect has been enhanced via APAR PI54038 to allow the
    use of the new special characters that can be part of
    RACF passwords.
    
    Body of new section should contain this text:
    RACF has introduced a set of special characters that can
    be used in RACF passwords. IMS Connect currently treats
    those special characters as invalid for RACF passwords.
    With APAR PI54038, IMS Connect will support the new
    special characters for RACF passwords.
    
    Below are the new special characters supported by RACF.
    The symbols shown are for EBCDIC code page 1047 or 037.
    IMS Connect uses EBCDIC code page 037 when validating the
    password characters.
    Special Characters (EBCDIC):
    4B 4C 4E 4F 50 5A 5C 60 6C 6D 6E 6F 7A 7E  <-- Hex value
     .  <  +  |  &  !  *  -  %  _  >  ?  :  =  <-- Symbol
    The special characters are in addition to the existing
    national characters:
    5B 7B 7C
     $  #  @
    -------------------
    

APAR Information

  • APAR number

    PI54038

  • Reported component name

    IMS V13

  • Reported component ID

    5635A0400

  • Reported release

    300

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2015-12-11

  • Closed date

    2016-03-25

  • Last modified date

    2016-04-05

  • APAR is sysrouted FROM one or more of the following:

    PI48112

  • APAR is sysrouted TO one or more of the following:

    006PC13 UI36524

Modules/Macros

  • HWSMDRCV HWSPWCH0 HWSSDRCV
    

Publications Referenced
SC19365100GC19365800   

Fix information

  • Fixed component name

    IMS V13

  • Fixed component ID

    5635A0400

Applicable component levels

  • R300 PSY UI36524

       UP16/03/31 P F603

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Platform":[{"code":"PF054","label":"z Systems"}],"Version":"300","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
14 December 2020