MVSFORUMS.com

[amit4u79]

Hello Experts, sorry first of all if this question is repeated. As part of SOX compliance around password controls in our organization, one of the deviations we are asked to remove is to ensure password set by users is not same as User ID. I was looking at Chapter 7 of RACF guide for Sysprogs and IBM has a new exit for password checks. I just dont know how to use the exit and trap User ID and check with password and if same, disallow that password combination to user.

Any help or pointer would be really grateful. Again, apologies if query already asked, but Search did not provide me any result(or may be I used incorrect strings for search).

Thanks much,
- Amit
_________________
I did not fail; I have found 10,000 ways that would not work - Albert Einstein.

[kolusu]

amit4u79,

You would need a new password exit and in there you can check if Pwd_userID_allowed = 'yes' or 'no'

sample new password exit (ICHPWX01)

ftp://public.dhe.ibm.com/eserver/zseries/zos/racf/rexxpwexit/ichpwx01.txt

Rexx to process the output (IRRPWREX)

ftp://public.dhe.ibm.com/eserver/zseries/zos/racf/rexxpwexit/irrpwrex.txt
_________________
Kolusu
www.linkedin.com/in/kolusu

[amit4u79]

Thanks a ton Kolusu, let me try this and get back to you in case I need any further assistance. This is really helpful.
_________________
I did not fail; I have found 10,000 ways that would not work - Albert Einstein.