IT16054: PASSWORD POLICY BEHAVES INCORRECT WHEN OPTION "PASSWORD REQUIRED TO CONTAIN SPECIAL CHARACTERS" IS ENABLED

si_52_build_5020500_interimfix_14
si_52_build_5020500_interimfix_14
si_52_build_5020500_interimfix_14
Media_IM_5020601_7
Media_IM_5020601_7
Media_IM_5020601_7
Media_IM_5020601_7

APAR status

• Closed as program error.

Error description

• Environment Info:
  IBM Sterling B2B Integrator: 5020500_11
  Database: Oracle 11g
  OS: Windows 2008
  
  Problem Statement:
  The documentation of the password policy creation is
  contradicting the error message displayed on the UI when an
  invalid password is entered during the change password process.
  
  The documentation states that 1 special character is needed and
  the UI messages states that 2 special characters are required.
  Additionally, numerals and capital letters are not
  considered as special characters by the code in opposition to
  what is stated in the documentation and UI error message.
  

Local fix

• STRRTC - 497169
  PdO / PdO
  Circumvention: None
  

Problem summary

• Users Affected:
  All
  
  Problem Description:
  Password policy behaves incorrect when option "password required
  to contain special characters" is enabled.
  
  Steps to reproduce:
  1. Create a password policy where the option "Password required
  to contain special characters" is set and choose to change
  password at
     next logon.
  2. Assign the above password policy to a user.
  3. Login with the user to dashboard and see that the following
  results:
     - Using Password01 throws the error above although it
  contains what should be considered 2 special characters (Upper
  cases and numerals).
     - Using password! works even though it only contains 1
  special character but password1 fails.
     - Using a password with only one type of character is also
  accepted, password like !!!!!!! is considered valid.
  on "Password
  required to contain special characters is set".
  
  Platforms Affected:
  All
  

Problem conclusion

• Resolution summary:
  A code fix is provided.
  
  Delivered In:
  5020500_14
  5020603
  5020601_7
  5020602_4
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR B2B INTEGRA

• Fixed component ID

  5725D0600

Applicable component levels