PH50113: RACF MAY RETURN ICH408I USER(X) GROUP(Y) NAME(Z) - PASS PHRASE IS NOT VALID / EXPLORER ACCESS MAY FAIL WITH AMQ4036

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• MQ Development investigates queue manager handling of
  credentials with variant EBCDIC characters when the queue
  manager uses an EBCDIC code page different from that used by
  RACF
  

Local fix

• https://ibm.biz/BdPqyM
  https://www.ibm.com/support/pages/ccsid-comparisons
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 3 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: When the queue manager and system       *
  *                      authorisation facility (SAF) are        *
  *                      configured with different coded         *
  *                      character set identifiers (CCSID),      *
  *                      passwords and passphrases using         *
  *                      special characters may prevent          *
  *                      authentication.                         *
  ****************************************************************
  Passwords/passphrases are converted to the queue manager CCSID
  when initially received, but not converted before being passed
  to the SAF.
  
  For certain characters with different representations across
  character sets (such as ! between CCSID 500 and 1047), this can
  cause issues authenticating with the SAF.
  

Problem conclusion

• A tuning parameter has been added to optionally convert
  passwords/passphrases to a different CCSID before being passed
  to the SAF.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI92409

Modules/Macros

• CSQIRECP CSQMCCSP
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R300 PSY UI92409

     UP23/07/15 P F307

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.