PM13124: No error message issued for Rational Developer for System z Pass word greater than eight characters

APAR status

• Closed as program error.

Error description

• When running Rational Developer for System z V7.5.1.1 V7.6.0.1
  passwords greater than eight characters are not validated.
  
  The problem is that a password has to be unique. '12345678' is
  a different password than '123456789' and should be treated
  that way. If the one enters '123456789', it would be expected
  that an error password message should be issued, even if the
  password is limited to 8 characters and '12345678' is the
  correct one.
  
  This would cause a security problem for the client.
  

Local fix

Problem summary

• The RseDaemon truncated the password up to 8 byte-length and
  then authenticated the userid and password.
  

Problem conclusion

• Now the RseDaemon authenticates the userid and password just as
  the client enters them.
  The problem listed in this APAR has been resolved with
  IBM Rational Developer for System z V7.6.1 Refresh Pack which
  is available from the Recommended Fixes support download page:
  http://www-1.ibm.com/support/docview.wss?rs=2294&uid=swg27006335
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL DEV FOR SY

• Fixed component ID

  5724T0700

Applicable component levels

• R761 PSY

     UP