API0034S INVALID USERID OR PASSWORD DETECTED

Products

• Endevor
• Endevor - ECLIPSE Plugin

Issue/Introduction

Use the NOMIXEDCASE option in RACF, SO11104 applied. Passphrase not working under Endevor Web Services. 

curl -v -u user:password http://example.com:port/EndevorService/rest/ENDEVOR/env

*   Trying ##.##.##.###...
* TCP_NODELAY set
* Connected to host (##.##.##.###) port 8014 (#0)
* Server auth using Basic with user '######'
> GET /EndevorService/rest/ENDEVOR/env HTTP/1.1
> Host: example.com:port
> Authorization: Basic 
> User-Agent: curl/7.55.1
> Accept: */*
>
< HTTP/1.1 500
< Cache-Control: private
< Expires: Thu, 01 Jan 1970 00:00:00 GMT
< API-Version: 1.1
< Content-Type: application/json
< Content-Length: 196
< Date: Tue, 27 Oct 2020 14:09:08 GMT
< Connection: close
<
{"returnCode":"0020","reasonCode":"0034","reports":null,"data":null,"messages":["EWS1117I Request processed by SysID, STC","API0034S INVALID USERID OR PASSWORD DETECTED"]}* Closing connection 0

 

Environment

Release : All Supported Releases

Resolution

The PTF SO11104 support NOMIXEDCASE option is to fix a specific case. If NOMIXEDCASE is set in RACF, Endevor will uppercase the password before passing it to RACF (it also uppercases the user id ).  

This can actually be a problem if normal passwords are set to be case-insensitive, with passphrases enabled, which means passphrases also need to be case-sensitive. 

Solution: 

Apply SO15462 for Endevor 18.1

Apply SO15437 for Endevor 18.0