Passticket signon failure DRC 009 in Top Secret

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

Passticket signon fails with a DRC 009 or invalid password.

TSSUTIL and SECTRACE show a DRC 09 which is invalid password and  typical for passticket failures.

Typical causes for this is not being authorized correctly to PTKTDATA resource or APPL name is not the correct name being used. The APPL name must be the name of the application signing on with the passticket. 

User is authorized correctly to PTKTDATA and using the correct APPL name.

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Another reason that the passticket signon can fail is when the userid is passed to generate the passticket and it is not in uppercase but lowercase which will cause the passticket to be generated incorrectly. z/OS doesnt support mixed case user ids. Ids must be upper case.