IJ26102: INCREASE THE SIZE OF SIGNIFICANT CHARACTERS FOR LOCAL OBJECTSERVER PASSWORDS USING AES HASHING SCHEME.

8.1.0-TIV-NCOMNIbus-ZLinux-FP0030
8.1.0-TIV-NCOMNIbus-Windows-FP0030
8.1.0-TIV-NCOMNIbus-Linux-FP0030
8.1.0-TIV-NCOMNIbus-AIX-FP0030
8.1.0-TIV-NCOMNIbus-ZLinux-FP0029
8.1.0-TIV-NCOMNIbus-Windows-FP0029
8.1.0-TIV-NCOMNIbus-Linux-FP0029
8.1.0-TIV-NCOMNIbus-AIX-FP0029
8.1.0-TIV-NCOMNIbus-ZLinux-FP0028
8.1.0-TIV-NCOMNIbus-Windows-FP0028
8.1.0-TIV-NCOMNIbus-Linux-FP0028
8.1.0-TIV-NCOMNIbus-AIX-FP0028
8.1.0-TIV-NCOMNIbus-ZLinux-FP0026
8.1.0-TIV-NCOMNIbus-Windows-FP0026
8.1.0-TIV-NCOMNIbus-Linux-FP0026
8.1.0-TIV-NCOMNIbus-AIX-FP0026
8.1.0-TIV-NCOMNIbus-ZLinux-FP0024
8.1.0-TIV-NCOMNIbus-Windows-FP0024
8.1.0-TIV-NCOMNIbus-Linux-FP0024
8.1.0-TIV-NCOMNIbus-AIX-FP0024
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 24, 8.1.0-TIV-NCOMNIbus-FP0024
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 26, 8.1.0-TIV-NCOMNIbus-FP0026
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 25, 8.1.0-TIV-NCOMNIbus-FP0025
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 27, 8.1.0-TIV-NCOMNIbus-FP0027
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 28, 8.1.0-TIV-NCOMNIbus-FP0028
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 29, 8.1.0-TIV-NCOMNIbus-FP0029

APAR status

• Closed as new function.

Error description

• The passwords for locally stored ObjectServer users are only
  significant up to the first 8 characters for the DES hashing
  scheme and 16 characters with the AES hashing scheme. Customers
  in secure environment who have stronger password length
  requirements greater than this require the ObjectServer to
  support a greater length password. As DES hashing scheme is
  obsolete, only the AES scheme is enhanced to support passwords
  greater than than the current limition up to a maximum of 64 due
  to storage limitations.
  
  Due to password size limitations with the JDBC jConnect library
  and any clients not using OMNibus clients libraries any user
  with a password greater than 30 characters will be unable to
  exchange the full password with the ObjectServer and thus fail
  to login to the server. These will need to use a password no
  greater than 30 characters in order to successfully login.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users who require larger length passwords.                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The passwords of locally stored ObjectServer users are only  *
  * significant up to the first 8 characters for the DES hashing *
  * scheme and 16 characters with the AES hashing scheme. Users  *
  * in secure environments who have stronger password length     *
  * requirements greater than this require the ObjectServer to   *
  * support a greater length password. As DES hashing scheme is  *
  * obsolete, only the AES scheme can be enhanced to support     *
  * passwords greater than the current limitation up to a        *
  * maximum of 64 due to storage limitations.                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the maintenance vehicle listed in the Problem          *
  * Conclusion.                                                  *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is contained in the following maintenance
  packages:
  | fix pack | 8.1.0-TIV-NCOMNIbus-FP0024
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NETCOOL/OMNIBUS

• Fixed component ID

  5724O4800

Applicable component levels