LOL. I forgot to chnge the code from the model I took it from. Actually, 16 is the correct value.
16 - RACF is to attempt to compare the data by using the RACF DES algorithm. If DES processing fails, RACF uses masking. https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.icha200/icha200352.htm Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get&[email protected] ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Monday, August 10, 2020 11:22 AM, Charles Mills <[email protected]> wrote: > > LA R15,8 SET RC 16 > > I would call that a misleading comment. :-) > > FWIW, I would code > > RACF_Use_DES_then_Mask EQU 8 > > ... > > LHI R15,RACF_Use_DES_then_Mask > > Charles > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Mark Jacobs > Sent: Monday, August 10, 2020 8:19 AM > To: [email protected] > Subject: Re: RACF ICHDEX01 Exit > > Maybe try this. > > ICHDEX01 AMODE 31 > LA R15,8 SET RC 16 > > - RACF IS TO ATTEMPT TO COMPARE THE DATA BY USING THE RACF > - DES ALGORITHM > - IF DES PROCESSING FAILS, RACF USES MASKING. > BR R14 RETURN TO SYSTEM > END ICHDEX01 > > Sent from ProtonMail, Swiss-based encrypted email. > > GPG Public Key - > https://api.protonmail.ch/pks/lookup?op=get&[email protected] > > ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ > On Monday, August 10, 2020 11:05 AM, Pesce, Andy [email protected] > wrote: > > > > Good morning everyone ! > > I am going to post this over in the RACF Listserv as well. So, I am trying > > to go to z/OS 2.2 and I found this APAR OA49109. > > I have a ton of accounts that were created many years ago that are not able > > to login to z/OS 2.2. Of course once I go and > > change the password on the account it works fine. These accounts have not > > had their passwords changed since the > > late 90's. Anyone have a sample "ICHDEX01" or can point me to a sample of > > that exit. I want to be able to allow these > > old passwords that are still using the old encryption. Thanks in advance. > > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > > --------------------------------------------------------------------------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
