OA58677: NEW FUNCTION - RACROUTE REQUEST=VERIFY NOW ISSUES ENF71

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Applications that listen for RACF ENF signal 71.             *
  * SYSPLEXDS                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * RACF does not issue ENF 71 when a user is revoked due to     *
  * excessive invalid password attempts.                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

• The following publications are affected by this support:
  
  
  
  -----------------------------------------------------------
  
  PUBLICATION NUMBER:  GA32088500
  
  PUBLICATION NAME: z/OS Security Server RACF Data Areas
  
  
  
  The ENF2 mapping macro is updated.
  
  
  
  In the IRR_ENF2FLAGS field at offset decimal 10, a new
  
  value is added:
  
  
  
  .1.. .... IRR_ENF2_VER_INVPWD RACROUTE REQUEST=VERIFY revoke
  
                                due to invalid passwords
  
  
  
  In the RR_ENF2Q field at offset decimal 12, a new
  
  value is added:
  
  
  
  X'04'     IRR_ENF2Q_VERIFY    ENF signal issued by RACROUTE
  
                                REQUEST=VERIFY
  
  
  
  -----------------------------------------------------------
  
  PUBLICATION NUMBER:  SA23228700
  
  PUBLICATION NAME: z/OS Security Server RACF System
  
                    Programmer's Guide
  
  
  
  In the chapter titled "RACF customization", under the topic
  
  titled "ENF signals", the description of ENF 71 is updated
  
  to include RACROUTE REQUEST=VERIFY.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ01963 UJ01964

Modules/Macros

• IRRIDENF ICHRIN00 IRRFRN00
  

Fix information

• Fixed component name

  RACF

• Fixed component ID

  5752XXH00

Applicable component levels

• R7B0 PSY UJ01963

     UP20/02/19 P F002

• R7C0 PSY UJ01964

     UP20/02/19 P F002

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.