OA48859: RACF CMD SETROPTS PASSWORD(SPECIALCHARS) DOES NOT RESULT INTO AUTH_SPECIAL INDICATOR ON IN THE CORRESPONDING SMF80 RECORD

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Using the new SETROPTS PASSWORD parameter SPECIALCHARS and
  ALGORITHM , that were provided in new function APAR OA43999
  do not set the AUTH_SPECIAL indicator (command was
  recorded due to it required SPECIAL AUTH) is not been set
  for either parm. When  AUTH_SPECIAL is ON the IRRADU00 utility
  report will show a YES in field position 82-85, which is not
  the case for the new PASSWORD parameter as the SPECUSE5 bitmask
  in ICHCOP00 was not updated appropriately.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Anyone examining the SMF Type 80 SETROPTS    *
  *                 record to see actions peformed by a SPECIAL  *
  *                 user when issuing any of the following       *
  *                 keywords:                                    *
  *                  - KERBLVL                                   *
  *                  - PASSWORD(MINCHANGE(x))                    *
  *                  - PASSWORD(MIXEDCASE)                       *
  *                  - PASSWORD(NOMIXEDCASE)                     *
  *                  - PASSWORD(SPECIALCHARS)                    *
  *                  - PASSWORD(NOSPECIALCHARS)                  *
  *                  - PASSWORD(ALGORITHM(KDFAES))               *
  *                  - PASSWORD(NOALGORITHM)                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  SETROPTS keywords added after ADDCREATOR and NOADDCREATOR
  have not been audited to indicate that SPECIAL authority
  was used.
  
  IBM.Function.RACF.PasswordCharacters
  IBM.Function.RACF.PasswordEncryption
  

Problem conclusion

• SETROPTS is updated to properly audit the keywords listed
  in the users affected section.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UA79364 UA79366 UA79367 VM65773

Modules/Macros

• ICHCOP00
  

Fix information

• Fixed component name

  RACF

• Fixed component ID

  5752XXH00

Applicable component levels

• R7A0 PSY UA79364

     UP15/10/28 P F510

• R780 PSY UA79366

     UP15/10/28 P F510

• R790 PSY UA79367

     UP15/10/28 P F510

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.