z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Restrictions for UTF-8 data values

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

User and registry names, which you specify using the USERDIDFILTER and REGISTRY operands of the RACMAP command, are not stored in IDIDMAP profiles as EBCDIC data, as most RACF® profile data is stored. Instead, they are encoded as UTF-8 data and stored in hexadecimal format so that they are compatible with the typical processing of X.500 distinguished names.

When possible, RACF translates these values to EBCDIC, using the IBM-1047 code page, in RACF command listings and utility output records to make them easier to read. When not possible, these values appear in hexadecimal format.

Restrictions: Because the IDIDMAP profile name (derived from the user name) and the registry name are encoded as UTF-8 data, the following restrictions apply.
  • When using the RACMAP command to define user and registry names that contain multibyte characters, if the resulting UTF-8 value exceeds 246 bytes for a user name or 255 bytes for a registry name, the RACMAP MAP command fails with message IRRW213I.
  • When using the SEARCH command, you cannot use the FILTER or MASK option to limit your search results based on the names of IDIDMAP profiles.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014