> LA      R15,8      SET RC 16

I would call that a misleading comment. :-)

FWIW, I would code

RACF_Use_DES_then_Mask EQU 8

...

         LHI R15,RACF_Use_DES_then_Mask 

Charles


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Mark Jacobs
Sent: Monday, August 10, 2020 8:19 AM
To: [email protected]
Subject: Re: RACF ICHDEX01 Exit

Maybe try this.

ICHDEX01 AMODE 31
         LA      R15,8      SET RC 16
* RACF IS TO ATTEMPT TO COMPARE THE DATA BY USING THE RACF
* DES ALGORITHM
* IF DES PROCESSING FAILS, RACF USES MASKING.
         BR      R14        RETURN TO SYSTEM
         END     ICHDEX01


Sent from ProtonMail, Swiss-based encrypted email.

GPG Public Key - 
https://api.protonmail.ch/pks/lookup?op=get&[email protected]

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, August 10, 2020 11:05 AM, Pesce, Andy <[email protected]> 
wrote:

> Good morning everyone !
>
> I am going to post this over in the RACF Listserv as well. So, I am trying to 
> go to z/OS 2.2 and I found this APAR OA49109.
> I have a ton of accounts that were created many years ago that are not able 
> to login to z/OS 2.2. Of course once I go and
> change the password on the account it works fine. These accounts have not had 
> their passwords changed since the
> late 90's. Anyone have a sample "ICHDEX01" or can point me to a sample of 
> that exit. I want to be able to allow these
> old passwords that are still using the old encryption. Thanks in advance.
>
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to