zSecure - User defined character set for PHRASE when using C4R.USER.=ATTR

With OA64290 the ability was introduced to define in the APPLDATA for C4R.USER.=ATTR PHRASE. That support is great as it allows to generate by default passphrases instead of passwords.

However, zSecure generates a passphrase selecting all characters, numbers and special characters available by default to zSecure. If one is using IBM supplied REXX IRRPHREX to limit some special characters, the random passphrase generation does fail:

adduser USER1 name('USER1') data('PHR TEST') owner(USRSPC) dfltgrp(USRSPC)

C4R913I ADDUSER USER1 OWNER(USRSPC) DFLTGRP(USRSPC) NAME('USER1') DATA('PHR TEST') NOADSP NOSPECIAL NOOPERATIONS NOGRP

TOR NOOIDCARD PHRASE('********') AUTH(USE) UACC(NONE)

ICH01020I PASS PHRASE REJECTED BY INSTALLATION PASS PHRASE EXIT

ICH01024I User USER1is defined as PROTECTED.

CKX962M Command may have failed, return code 4

We need the ability to define the 'pool' of characters zSecure is allowed to select characters from or limit them.

For example allow the APPLDATA parameter in the following variations:

• PHRASE -> allows all available characters/numbers/special/length

• PHRASE-C-50 -> allows for a passphrase based on text characters only and 50 characters long

• PHRASE-N-80 -> allows for a passphrase based on numbers only and 80 characters

• PHRASE-CN-70 -> allows for a passphrase based on text characters and numbers and 70 characters total

• PHRASE-CNS-40 -> allows for a passphrase based on the all available charachters/numbers/special but limit the length to 40 characters.