OA67750: NEW FUNCTION-OPTION TO BYPASS RACF BUILT-IN PASSWORD PHRASE SYNTAX RULES

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of RACF password phrases on z/OS 3.1                   *
  * and higher.                                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * It is not possible to bypass the built-                      *
  * in password phrase syntax rules.                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  It is not possible to bypass the built-
  in password phrase syntax rules.
  

Problem conclusion

Temporary fix

Comments

• The built-in password phrase syntax rules may now be bypassed
  by defining a profile named PHRASE.BYPASS.BUILTIN.SYNTAX.RULES
  in the new OPTRACF class, and activating and RACLISTing the
  OPTRACF class.
  
  The following z/OS 3.2 publications are updated to describe the
  new function. This information is also applicable for z/OS 3.1.
  
  SA232292xx z/OS Security Server RACROUTE Command Language
             Reference
    - The description of the phrase bult-in syntax rules is
      modified in the ADDUSER, ALTUSER, and PASSWORD commands
    - SETROPTS LIST examples are updated to display the new output
      lines at the bottom of the PASSWORD PROCESSING OPTIONS
      section
  
  GA320885xx z/OS Security Server RACROUTE Data Areas
    - The RCVT area is updated to contain the new RCVTPSYN bit
  
  SA232298xx z/OS Security Server RACF General User's Guide
    - The description of the phrase bult-in syntax rules is
      modified
  
  SA232288xx z/OS Security Server RACF Macros and Interfaces
    - The new OPTRACF class is added
  
  SA232289xx z/OS Security Server RACF Security Administrator's
             Guide
    - The description of the phrase bult-in syntax rules is
      modified
    - Activating the bypass feature is described
  
  SA232287xx z/OS Security Server RACF System Programmer's Guide
    - The list of functions requiring the RACF subsystem is
      updated to include bypassing phrase syntax rules
  
  SA232294xx z/OS Security Server RACROUTE Macro Reference
    - The descriptions of the NEWPASS and NEWPHRASE keywords of
      RACROUTE REQUEST=VERIFY and VERIFYX are modified
  
  For the specific topics that are updated, see the
  'summary of changes' section for each of these publications.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ98388 UJ98390

Modules/Macros

• ICHCOP02 ICHCCU00 ICHIRCVT ICHRRCDX IRRENF00 IRRRIN12 IRRZDC10
  ICHCAU00 ICHCOP11 ICHCPA00 IRRE6200
  

Fix information

• Fixed component name

  RACF

• Fixed component ID

  5752XXH00

Applicable component levels

• R7E0 PSY UJ98388

     UP25/11/25 P F511  

• R7F0 PSY UJ98390

     UP25/11/25 P F511  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.