PM86299: LIBERTY PROFILE SUPPORT FOR ONE WAY HASH

APAR status

• Closed as program error.

Error description

• Passwords stored in configuration files that do not require to
  be decrypted, now have the ability to be stored using a one way
  hash.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: Provide the ability for passwords       *
  *                      stored in configuration files that do   *
  *                      not need to be decrypted to use a one   *
  *                      way hash.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  One way hash encoding is perferrable for hiding user passwords
  which do not require decrypting to the original text.
  

Problem conclusion

• With this fix, password hashing encoding is provided by
  securityUtility tool and developer tool.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.0. Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• R850 PSY

     UP