SO16055 ADD SIGNON PASSWORD CHANGE INDICATOR TO AUDIT RECORD has the following description.
Add flag $FLPWC to the SMF Type 80 and Audit Tracking File record to indicate a password change has occurred during a system entry signon. This new flag resides in field FLIND1 in the SMF80 record FLOG extension.
CAKOMAC0 #FLOG macro is also updated to reflect all currently mapped fields. The $FLPWC flag can be used along with the FLEVENT $S80INIT flag to determine if a signon password change has occurred.
FLEVENT = $S80INIT (x'01') + FLIND1 = $FLPWC (x'01')
- These two flags together indicate a password or phrase change has occurred at signon.
Will SO16055 change the record layout of the Audit record?
Release : 16.0
Component : CA Top Secret for z/OS