A fix is available
APAR status
Closed as program error.
Error description
When implementing the service parameter for SYSPUpperCase (which can convert UserIDs and passwords to upper case) users may find that processing for passphrases no longer functions as expected.
Local fix
Enable RACF mixed case support.
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM MQ for z/OS Version 9 * * Release 2 Modification 0 and Release 3 * * Modification 0. * **************************************************************** * PROBLEM DESCRIPTION: The problem occurs when using CONNAUTH * * with an AUTHTYPE(IDPWOS) AUTHINFO with * * the SYSPUpperCase service parameter * * when RACF mixed case passwords are not * * enabled. If CHCKCLNT checking is * * enabled, and a client application * * supplies a passphrase with lower case * * characters, then the connection will * * fail with MQRC 2035 * * (MQRC_NOT_AUTHORIZED) and an ICH408I * * message will be issued with message * * contents 'PASS PHRASE IS NOT VALID'. * **************************************************************** The SYSPUpperCase service parameter uppercases passwords/passphrases in MQCSP from the CHINIT if RACF mixed case passwords are not enabled. The logic does not distinguish between passwords and passphrases, which results in an authentication error if a passphrase contains lower case characters, since passphrases are always mixed case.
Problem conclusion
The SYSPUpperCase service parameter logic has been corrected to only uppercase passwords if RACF mixed case passwords are not enabled.
Temporary fix
Comments
APAR Information
APAR number
PH51698
Reported component name
IBM MQ Z/OS V9
Reported component ID
5655MQ900
Reported release
200
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2023-01-04
Closed date
2023-01-19
Last modified date
2023-03-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
CSQMCCSP
Fix information
Fixed component name
IBM MQ Z/OS V9
Fixed component ID
5655MQ900
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"200","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
01 March 2023