IBM Support

PI91981: IMS DOES NOT INFORM SIGN ON USER THAT THE VERIFY KEYWORD PARM ISIGNORED IF PASSWORD VERIFICATION OPTION IS NOT ENABLED.

Fixes are available

9.0.0.8: WebSphere Application Server traditional V9.0 Fix Pack 8
8.5.5.14: WebSphere Application Server V8.5.5 Fix Pack 14
9.0.0.9: WebSphere Application Server traditional V9.0 Fix Pack 9
9.0.0.10: WebSphere Application Server traditional V9.0 Fix Pack 10
8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
9.0.0.11: WebSphere Application Server traditional V9.0 Fix Pack 11
9.0.5.0: WebSphere Application Server traditional Version 9.0.5 Refresh Pack
9.0.5.1: WebSphere Application Server traditional Version 9.0.5 Fix Pack 1
9.0.5.2: WebSphere Application Server traditional Version 9.0.5 Fix Pack 2
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
9.0.5.3: WebSphere Application Server traditional Version 9.0.5 Fix Pack 3
9.0.5.4: WebSphere Application Server traditional Version 9.0.5 Fix Pack 4
9.0.5.5: WebSphere Application Server traditional Version 9.0.5 Fix Pack 5
WebSphere Application Server traditional 9.0.5.6
9.0.5.7: WebSphere Application Server traditional Version 9.0.5 Fix Pack 7
9.0.5.8: WebSphere Application Server traditional Version 9.0.5.8
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
9.0.5.9: WebSphere Application Server traditional Version 9.0.5.9
9.0.5.10: WebSphere Application Server traditional Version 9.0.5.10
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21
9.0.5.11: WebSphere Application Server traditional Version 9.0.5.11
9.0.5.12: WebSphere Application Server traditional Version 9.0.5.12
8.5.5.22: WebSphere Application Server V8.5.5.22
9.0.5.13: WebSphere Application Server traditional Version 9.0.5.13
9.0.5.14: WebSphere Application Server traditional Version 9.0.5.14
Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • '/SIGN userid userpw NEWPW nuserpw VERIFY nuserpw'.
    If password verification option is not enabled in IMS the VERIFY
    keyword is ignored and the new user password is not verified,
    although the user is not notified that the new password was not
    verified. The nuserpw entry for NEWPW may differ from the entry
    for VERIFY nuserpw. This may result in invalid password on next
    attempt to sign on.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All IMS 15 VTAM terminal users                               *
    * that specify the VERIFY keyword                              *
    * on the /SIGN command.                                        *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * With Password Verification                                   *
    * disabled in DFSINTX0 (default),                              *
    * the VERIFY keyword on the                                    *
    * /SIGN command is ignored.                                    *
    *                                                              *
    * This is a forward fit of PI87404.                            *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * INSTALL CORRECTIVE SERVICE FOR APAR/PTF                      *
    ****************************************************************
    IMS was defined with the 'Password Verification' option
    disabled, which is the default setting in the IMS
    initialization user exit DFSINTX0.
    
    The VTAM terminal user issued a /SIGN command to signon
    to IMS.  The user attempted to change the password on
    the /SIGN command by specifying NEWPW and VERIFY keywords.
    However, IMS did not verify that the passwords specified
    for NEWPW and VERIFY matched - in fact, IMS ignored the
    VERIFY keyword.
    
    IMS documentation indicates that the VERIFY keyword can be
    used to validate the new password, but this was only being
    done when the 'Password Verification' option in DFSINTX0
    was enabled.
    
    The purpose of the 'Password Verification' option is to
    prompt the user to reenter a new password when VERIFY is
    not specified on the /SIGN command.
    
    However, if specified on the /SIGN command, the VERIFY
    keyword should be processed in any environment.
    

Problem conclusion

  • The VERIFY keyword of the /SIGN command will be processed
    in all environments.  If NEWPW and VERIFY are specified,
    then the passwords will be validated.
    
    DFSNCS40 is modified to process the VERIFY keyword value
    with or without 'Password Verification' enabled.
    
    The following documentation updates are required:
    
    Commands, Volume 2: IMS Commands N-V
    SC27-6781-00
    
    /SIGN command:
    
    Add the following to the VERIFY keyword description:
    
    The VERIFY keyword can be used to verify new passwords
    whether or not the 'Password Verification' option is
    enabled in the Initialization exit routine DFSINTX0.
    
    When 'Password Verification' is enabled, the user must
    verify new passwords either by specifying both NEWPW
    and VERIFY on the /SIGN command, or by reentering the
    password on the DFS3656 panel.
    
    When 'Password Verification' is disabled, the user
    can verify new passwords by specifying both NEWPW
    and VERIFY on the /SIGN command.
    

Temporary fix

  • REQUISITE MAINTENANCE:
    GEN: POSTREQ PH03983
    

Comments

  • REPINNED RP18/10/19 (ATXT) TO ADD POSTREQ PI91981 INFO.
     **** PE18/10/19 PTF IN ERROR. SEE APAR PH03983 FOR DESCRIPTION.
    ×**** PE18/10/11 FIX IN ERROR. SEE APAR PH03983  FOR DESCRIPTION
    

APAR Information

  • APAR number

    PI91981

  • Reported component name

    IMS V15

  • Reported component ID

    5635A0600

  • Reported release

    502

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-01-02

  • Closed date

    2018-01-10

  • Last modified date

    2018-11-08

  • APAR is sysrouted FROM one or more of the following:

    PI87404

  • APAR is sysrouted TO one or more of the following:

    UI53120

Modules/Macros

  • DFSNCS40
    

Publications Referenced
SC27678100    

Fix information

  • Fixed component name

    IMS V15

  • Fixed component ID

    5635A0600

Applicable component levels

  • R502 PSY UI53120

       UP18/01/20 P F801

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSEPH2","label":"IMS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"15","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Document Information

Modified date:
23 December 2023