PH51698: MQ Z/OS: AFTER SETTING SYSPUPPERCASE, PASSPHRASES MAY NO LONGER FUNCTION AS EXPECTED.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• When implementing the service parameter for SYSPUpperCase
  (which can convert UserIDs and passwords to upper case) users
  may find that processing for passphrases no longer functions as
  expected.
  

Local fix

• Enable RACF mixed case support.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 2 Modification 0 and Release 3       *
  *                 Modification 0.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: The problem occurs when using CONNAUTH  *
  *                      with an AUTHTYPE(IDPWOS) AUTHINFO with  *
  *                      the SYSPUpperCase service parameter     *
  *                      when RACF mixed case passwords are not  *
  *                      enabled. If CHCKCLNT checking is        *
  *                      enabled, and a client application       *
  *                      supplies a passphrase with lower case   *
  *                      characters, then the connection will    *
  *                      fail with MQRC 2035                     *
  *                      (MQRC_NOT_AUTHORIZED) and an ICH408I    *
  *                      message will be issued with message     *
  *                      contents 'PASS PHRASE IS NOT VALID'.    *
  ****************************************************************
  The SYSPUpperCase service parameter uppercases
  passwords/passphrases in MQCSP from the CHINIT if RACF mixed
  case passwords are not enabled. The logic does not distinguish
  between passwords and passphrases, which results in an
  authentication error if a passphrase contains lower case
  characters, since passphrases are always mixed case.
  

Problem conclusion

• The SYSPUpperCase service parameter logic has been corrected to
  only uppercase passwords if RACF mixed case passwords are not
  enabled.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• CSQMCCSP
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R200 PSY UI90159

     UP23/01/28 P F301

• R300 PSY UI90158

     UP23/02/04 P F302

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.