TPX: User is unable to enter a NewPassword on the TPX logon screen

Products

• TPX - Session Management
• Vman Session Management for z/OS

Issue/Introduction

 On the TPX Logon screen a user tries to enter a NewPassword and receives the following message:



This works successfully in the TEST LPAR but not in Production.

 

Environment

Release : TPX 5.4
Security: RACF

 

Cause

A SECDBG trace showed - SAF Return Code :Hexadecimal 08 and RACF Return Code: Hexidecimal 10

Here is the IBM Documentation where the return/reason codes are documented  ; RACROUTE REQUEST=VERIFY

10

 At least one of the following conditions has occurred:

• The new password or password phrase is not valid.
• A new password phrase was specified with a current password, or a new password was specified with a current password phrase.
• A new password phrase was specified with a PassTicket as the current password, but the user does not currently have a password phrase.
• A password or password phrase change is disallowed at this time because the minimum password-change interval has not passed.

Resolution

The password for the user was made permanent (NOEXPIRE) the same day they tried to enter a Newpassword.  The minimum PW change interval was 1 day.  After waiting a day then a Newpassword could be entered.