PK82109: PASSWORDS ARE NOT TRUNCATED AFTER 8 CHARACTERS

Fixes are available

APAR status

Closed as program error.

Error description

This issue only applies if Local OS user repository is being
used with WebSphere for z/OS. Currently passwords are not
truncated after 8 characters.

For example, if the correct password contains 8 characters, and
the user enters those 8 characters correctly - authentication
will be successful. However, if after entering the first 8
characters correctly there are subsequent characters present,
authentication is unsuccessful.

The desired behavior is to only use the first 8 characters for
authentication and ignore any subsequent characters.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  All users of WebSphere Application Server   *
*                  V6.1.0 for z/OS using the Local OS User     *
*                  Registry.                                   *
****************************************************************
* PROBLEM DESCRIPTION: Passwords are not truncated to eight    *
*                      characters as they were in earlier      *
*                      versions of WebSphere Application       *
*                      Server for z/OS.                        *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Due to support for longer passwords known as pass phrases, the
z/OS password is no longer truncated to eight characters.
Customers who do not use the pass phrase support may require
truncation for backward compatibility.

Problem conclusion

z/OS passwords longer than eight characters will be
truncated if a new custom property is set on the Local OS User
Registry.
Name: com.ibm.security.SAF.truncatePassword
Value: true

APAR PK82109 requires changes to documentation.

NOTE: Periodically, we refresh the documentation on our
Web site, so the changes might have been made before you
read this text. To access the latest on-line
documentation, go to the product library page at:

http://www.ibm.com/software/webservers/appserv/library

The following changes to the WebSphere Application
Server Version 6.1 Information Center will be made available
in June, 2009.

The Custom Properties section of the topic "Local operating
system settings" will be updated to include
the following description of the new
com.ibm.security.SAF.truncatePassword custom property:

com.ibm.security.SAF.truncatePassword

Setting this property causes passwords that are longer than
eight characters to be truncated to the first eight
characters.

APAR PK82109 is currently targeted for inclusion in Service
Level (Fix Pack) 6.1.0.25 of WebSphere Application Server V6.1
for z/OS.

Please refer to URL:
//www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
for Fix Pack availability.

Temporary fix

Comments

APAR Information

APAR number
PK82109
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
610
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-03-09
Closed date
2009-03-31
Last modified date
2009-07-01

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

PK90277

Fix information

Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500

Applicable component levels

R610 PSY UK47214
UP09/06/22 P F906

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 December 2021

Tips

PK82109: PASSWORDS ARE NOT TRUNCATED AFTER 8 CHARACTERS

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R610 PSY UK47214

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

Document Information

Share your feedback

Need support?