A fix is available
APAR status
Closed as new function.
Error description
RACF now supports an extended set of special characters which IMS/ICON does not currently support.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All IMS V13 IMS Connect users that have * * RACF security enabled to authenticate * * TCP/IP connections. * **************************************************************** * PROBLEM DESCRIPTION: IMS Connect does not allow the new * * special password characters supported * * by RACF. * * * * Retro-fit of PI48112. * **************************************************************** * RECOMMENDATION: INSTALL CORRECTIVE SERVICE FOR APAR/PTF * **************************************************************** RACF has introduced 14 special characters that can be used in RACF passwords. IMS Connect currently treats those special characters as invalid for RACF passwords. Below are the new special characters supported by RACF. The symbols shown are for EBCDIC code page 1047 or 037. IMS Connect uses EBCDIC code page 037 when validating the password characters. Special Characters (EBCDIC): 4B 4C 4E 4F 50 5A 5C 60 6C 6D 6E 6F 7A 7E <-- Hex value . < + | & ! * - % _ > ? : = <-- Symbol The special characters are in addition to the existing national characters: 5B 7B 7C $ # @
Problem conclusion
Temporary fix
Comments
Via this APAR, IMS Connect Version 13 will allow passwords, sent by TCP/IP clients, that contain the new special characters supported by RACF. Please take a look at the documentation changes for more information about the new special characters. This APAR adds support for the special characters to IMS Connect only. APAR PI54037 adds support for the special characters to IMS 13. Additional service for IMS Connect clients might be required to enable the client support for the special characters. APAR PI57031 adds the support to the IMS Universal Drivers. APAR PI52846 adds the support to IMS Enterprise Suite Connect API for Java. The following IBM provided IMS Connect TCP/IP clients do not need additional service: - IMS Enterprise Suite SOAP Gateway - IMS Transaction Manager (TM) Resource Adapter Clients must pass the special characters to IMS Connect by using the appropriate hexadecimal values. Before enabling special character support in RACF, you should make sure all your IMS Connect systems have this APAR applied and that all your IMS Connect TCP/IP clients support sending password with special characters. Please note that support for LOCAL port is not enhanced. Thus, IMS Transaction Message Resource Adapter using the LOCAL port is not supported. Also note that you should expect unpredictable results if you have enabled special character support in RACF and you have systems running mixed versions of IMS Connect and/or IMS Connect systems without this APAR. The support provided via this APAR is only for IMS Connect Version 13. The following IMS Connect parts have been enhanced to allow the use of the new special characters when validating a RACF password provided by a TCP/IP client: HWSMDRCV: Allow special characters for DRDA clients HWSPWCH0: Allow special characters for password change requests HWSSDRCV: Allow special characters for TCP/IP clients -------------------------- DOCUMENT CHANGES FOLLOW: -------------------------- SRLs SC19365100 GC19365800 ------------------- SC19-3651-00 SC19365100 In: IMS V13 Communications and Connections Under: "Format of user portion of IRM for HWSSMPL0, HWSSMPL1, and user-written message exit routines" Please add to the table "User portion of IRM for HWSSMPL0, HWSSMPL1, and user-written user message exits" the information below into the "Meaning" column for the row with field "IRM_RACF_PW" The password may contain any of the special characters shown below. IMS Connect uses EBCDIC code page 037 to perform password character validation. The symbols shown apply to EBCDIC code page 1047 and 037. Special Characters (EBCDIC): 4B 4C 4E 4F 50 5A 5C 60 6C 6D 6E 6F 7A 7E <-- Hex value . < + | & ! * - % _ > ? : = <-- Symbol The special characters are in addition to the existing national characters: 5B 7B 7C $ # @ ------------------- ------------------- GC19-3658-00 GC19365800 Under IMS V13: Release Planning IMS Version 13 enhancements IMS system enhancements Add a new section: "IMS Connect Support of RACF Special Characters" With summary: IMS Connect has been enhanced via APAR PI54038 to allow the use of the new special characters that can be part of RACF passwords. Body of new section should contain this text: RACF has introduced a set of special characters that can be used in RACF passwords. IMS Connect currently treats those special characters as invalid for RACF passwords. With APAR PI54038, IMS Connect will support the new special characters for RACF passwords. Below are the new special characters supported by RACF. The symbols shown are for EBCDIC code page 1047 or 037. IMS Connect uses EBCDIC code page 037 when validating the password characters. Special Characters (EBCDIC): 4B 4C 4E 4F 50 5A 5C 60 6C 6D 6E 6F 7A 7E <-- Hex value . < + | & ! * - % _ > ? : = <-- Symbol The special characters are in addition to the existing national characters: 5B 7B 7C $ # @ -------------------
APAR Information
APAR number
PI54038
Reported component name
IMS V13
Reported component ID
5635A0400
Reported release
300
Status
CLOSED UR1
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function / Xsystem
Submitted date
2015-12-11
Closed date
2016-03-25
Last modified date
2016-04-05
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
006PC13 UI36524
Modules/Macros
HWSMDRCV HWSPWCH0 HWSSDRCV
SC19365100 | GC19365800 |
Fix information
Fixed component name
IMS V13
Fixed component ID
5635A0400
Applicable component levels
R300 PSY UI36524
UP16/03/31 P F603
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Platform":[{"code":"PF054","label":"z Systems"}],"Version":"300","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
14 December 2020