IBM Support

IT16054: PASSWORD POLICY BEHAVES INCORRECT WHEN OPTION "PASSWORD REQUIRED TO CONTAIN SPECIAL CHARACTERS" IS ENABLED

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Environment Info:
    IBM Sterling B2B Integrator: 5020500_11
    Database: Oracle 11g
    OS: Windows 2008
    
    Problem Statement:
    The documentation of the password policy creation is
    contradicting the error message displayed on the UI when an
    invalid password is entered during the change password process.
    
    The documentation states that 1 special character is needed and
    the UI messages states that 2 special characters are required.
    Additionally, numerals and capital letters are not
    considered as special characters by the code in opposition to
    what is stated in the documentation and UI error message.
    

Local fix

  • STRRTC - 497169
    PdO / PdO
    Circumvention: None
    

Problem summary

  • Users Affected:
    All
    
    Problem Description:
    Password policy behaves incorrect when option "password required
    to contain special characters" is enabled.
    
    Steps to reproduce:
    1. Create a password policy where the option "Password required
    to contain special characters" is set and choose to change
    password at
       next logon.
    2. Assign the above password policy to a user.
    3. Login with the user to dashboard and see that the following
    results:
       - Using Password01 throws the error above although it
    contains what should be considered 2 special characters (Upper
    cases and numerals).
       - Using password! works even though it only contains 1
    special character but password1 fails.
       - Using a password with only one type of character is also
    accepted, password like !!!!!!! is considered valid.
    on "Password
    required to contain special characters is set".
    
    Platforms Affected:
    All
    

Problem conclusion

  • Resolution summary:
    A code fix is provided.
    
    Delivered In:
    5020500_14
    5020603
    5020601_7
    5020602_4
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT16054

  • Reported component name

    STR B2B INTEGRA

  • Reported component ID

    5725D0600

  • Reported release

    525

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-07-11

  • Closed date

    2016-09-28

  • Last modified date

    2017-05-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    STR B2B INTEGRA

  • Fixed component ID

    5725D0600

Applicable component levels

  • R525 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS3JSW","label":"IBM Sterling B2B Integrator"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2.5","Edition":"","Line of Business":{"code":"LOB02","label":"AI Applications"}}]

Document Information

Modified date:
14 May 2017