Fixes are available
9.0.0.8: WebSphere Application Server traditional V9.0 Fix Pack 8
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
9.0.0.9: WebSphere Application Server traditional V9.0 Fix Pack 9
9.0.0.10: WebSphere Application Server traditional V9.0 Fix Pack 10
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
9.0.0.11: WebSphere Application Server traditional V9.0 Fix Pack 11
9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
9.0.5.4: WebSphere Application Server traditional Version 9.0.5 Fix Pack 4
9.0.5.5: WebSphere Application Server traditional Version 9.0.5 Fix Pack 5
WebSphere Application Server traditional 9.0.5.6
9.0.5.7: WebSphere Application Server traditional Version 9.0.5 Fix Pack 7
9.0.5.8: WebSphere Application Server traditional Version 9.0.5.8
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
9.0.5.9: WebSphere Application Server traditional Version 9.0.5.9
9.0.5.10: WebSphere Application Server traditional Version 9.0.5.10
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
9.0.5.11: WebSphere Application Server traditional Version 9.0.5.11
9.0.5.12: WebSphere Application Server traditional Version 9.0.5.12
8.5.5.22: WebSphere Application Server V8.5.5.22
9.0.5.13: WebSphere Application Server traditional Version 9.0.5.13
9.0.5.14: WebSphere Application Server traditional Version 9.0.5.14
Obtain the fix for this APAR.
APAR status
Closed as program error.
Error description
'/SIGN userid userpw NEWPW nuserpw VERIFY nuserpw'. If password verification option is not enabled in IMS the VERIFY keyword is ignored and the new user password is not verified, although the user is not notified that the new password was not verified. The nuserpw entry for NEWPW may differ from the entry for VERIFY nuserpw. This may result in invalid password on next attempt to sign on.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * * All IMS 15 VTAM terminal users * * that specify the VERIFY keyword * * on the /SIGN command. * **************************************************************** * PROBLEM DESCRIPTION: * * With Password Verification * * disabled in DFSINTX0 (default), * * the VERIFY keyword on the * * /SIGN command is ignored. * * * * This is a forward fit of PI87404. * **************************************************************** * RECOMMENDATION: * * INSTALL CORRECTIVE SERVICE FOR APAR/PTF * **************************************************************** IMS was defined with the 'Password Verification' option disabled, which is the default setting in the IMS initialization user exit DFSINTX0. The VTAM terminal user issued a /SIGN command to signon to IMS. The user attempted to change the password on the /SIGN command by specifying NEWPW and VERIFY keywords. However, IMS did not verify that the passwords specified for NEWPW and VERIFY matched - in fact, IMS ignored the VERIFY keyword. IMS documentation indicates that the VERIFY keyword can be used to validate the new password, but this was only being done when the 'Password Verification' option in DFSINTX0 was enabled. The purpose of the 'Password Verification' option is to prompt the user to reenter a new password when VERIFY is not specified on the /SIGN command. However, if specified on the /SIGN command, the VERIFY keyword should be processed in any environment.
Problem conclusion
The VERIFY keyword of the /SIGN command will be processed in all environments. If NEWPW and VERIFY are specified, then the passwords will be validated. DFSNCS40 is modified to process the VERIFY keyword value with or without 'Password Verification' enabled. The following documentation updates are required: Commands, Volume 2: IMS Commands N-V SC27-6781-00 /SIGN command: Add the following to the VERIFY keyword description: The VERIFY keyword can be used to verify new passwords whether or not the 'Password Verification' option is enabled in the Initialization exit routine DFSINTX0. When 'Password Verification' is enabled, the user must verify new passwords either by specifying both NEWPW and VERIFY on the /SIGN command, or by reentering the password on the DFS3656 panel. When 'Password Verification' is disabled, the user can verify new passwords by specifying both NEWPW and VERIFY on the /SIGN command.
Temporary fix
REQUISITE MAINTENANCE: GEN: POSTREQ PH03983
Comments
REPINNED RP18/10/19 (ATXT) TO ADD POSTREQ PI91981 INFO. **** PE18/10/19 PTF IN ERROR. SEE APAR PH03983 FOR DESCRIPTION. ×**** PE18/10/11 FIX IN ERROR. SEE APAR PH03983 FOR DESCRIPTION
APAR Information
APAR number
PI91981
Reported component name
IMS V15
Reported component ID
5635A0600
Reported release
502
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-01-02
Closed date
2018-01-10
Last modified date
2018-11-08
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI53120
Modules/Macros
DFSNCS40
SC27678100 |
Fix information
Fixed component name
IMS V15
Fixed component ID
5635A0600
Applicable component levels
R502 PSY UI53120
UP18/01/20 P F801
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
Document Information
Modified date:
23 December 2023