IBM Support

PI51188: Login fails with mixed-case password phrase on z/OS.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Logging in to the server with a mixed-case password phrase
    will
    fail with an authentication error when mixed-case password
    support is not enabled on the z/OS SAF security product.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty Profile - Security           *
    ****************************************************************
    * PROBLEM DESCRIPTION: When using the z/OS LocalOSRegistry     *
    *                      Mixed-Case passwords may cause          *
    *                      authentication password checks to       *
    *                      fail.                                   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    After installations have enabled Mixed-Case passwords in the
    LocalOSRegistry, users with Mixed-Case passwords may fail
    authentication. This applies to both Mixed-Case passwords and
    passphrases. The following messages are logged:
    CWWKS2910E: SAF service IRRSIA00_CREATE did not succeed. SAF
    return code 0x00000008. RACF return code 0x00000008. RACF reason
    code 0x00000014. Internal error code 0x00000006.
    CWWKS1100A: Authentication did not succeed for user ID myuser.
    An invalid user ID or password was specified.
    

Problem conclusion

  • Code has been changed to properly enabled Mixed-Case passwords.
    
    The fix for this APAR is currently targeted for inclusion in fix
    pack 8.5.5.9.  Please refer to the Recommended Updates page for
    delivery information:
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    
    IBM Support Search Tags: RACF ACF2 PASS PHRASE UPPERCASE UPPER
    CASE ZOS SECURITY_ZOS_AUTHN_REGISTRY_LOCALOS
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI51188

  • Reported component name

    WAS LIBERTY COR

  • Reported component ID

    5725L2900

  • Reported release

    855

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-10-26

  • Closed date

    2015-11-13

  • Last modified date

    2015-11-13

  • APAR is sysrouted FROM one or more of the following:

    PM85770

  • APAR is sysrouted TO one or more of the following:

    PI52690

Fix information

  • Fixed component name

    WAS LIBERTY COR

  • Fixed component ID

    5725L2900

Applicable component levels

  • R855 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSD28V","label":"WebSphere Application Server Liberty Core"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"855","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
14 October 2021