Invalid Passticket via TPX to Top Secret
search cancel

Invalid Passticket via TPX to Top Secret


Article ID: 234096


Updated On:


Top Secret


What happens if a passticket is invalid, and TPX keeps sending the invalid passticket to Top Secret thru TSO?
If PTHRESH is set to 3, will Top Secret suspend userids after three invalid password tries?  


Release : 16.0

Component : Top Secret for z/OS


Since the passticket is system generated it would not be invalid.  But if it is passed from one system to another, both systems must be using the same encryption key.  If the encrytion is different then the passticket  will not appear the same on each system and fail.  If both are using the same encryption then the passticket will be accepted.  If a user tries to signon multiple times and fails they would be subjected to PTHRESH because the password is checked first.  So in this case the user would be suspended after three invalid password attempts whether using passtickets, passwords or passphrases.