PI47323: ISZE21PH E21 EXIT SCRIPT EXPIRED PASSWORD PASSPHRASE ON LOCKED TERMINAL RESULTS IN INVALID PASSWORD MESSAGE ON UNLOCK PANEL

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Your IBM Session Manager V3.2.00B instance is configured to use
  the E21 signon exit script ISZE21PH.
  
  When a terminal is locked the ISZPLOCK panel is displayed for
  the end user to key in their password or passphrase to unlock
  the terminal.
  
  If the user password or passphrase expires while the terminal
  is locked, and the user enters their password or passphrase to
  unlock their terminal, they receive message:
  
  ISZ4266E Terminal unlock failed userid luname.  Incorrect
  password.
  
  They should be disconnected and the auditlog should have
  message:
  
  ISZ4016I Signon failed - Password expired for userid.
  
  If the user disconnects their 3270 emulator and reconnects and
  attempts to signon at the signon panel, they do receive the
  expired password message as expected.
  
  
  
  Additional Symptom(s) Search Keyword(s): KIXREVWJB
  ISZ00821 ISZ00821.txt
  ISZSLOCK LOCK LOCKTERM ESMVERIFYUSER
  ISZ4272E RACROUTE VERIFY Failure. User xxxxxxx ,
  SAF RC=8, ESM RC=12, ESM RSN=0
  

Local fix

• Contact IBM Session Manager Change Team for patch ISZ00821.txt.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Users of IBM Session Manager V3.2        *
  ****************************************************************
  * PROBLEM DESCRIPTION: When a user on the IDLELOCK screen      *
  *                      types in a password, which has expired, *
  *                      to unlock his screen they receive       *
  *                      message 4015 - bad password instead of  *
  *                      message 4016 - expired password         *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF.                               *
  ****************************************************************
  

Problem conclusion

• Program has been corrected to send the correct message for an
  expired password.
  200Y
  ISZCINIT
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI30444

Modules/Macros

• ISZCINIT
  

Fix information

• Fixed component name

  SESSION MANAGER

• Fixed component ID

  5655U9800

Applicable component levels

• R200 PSY UI30444

     UP15/08/25 P F508

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.