ACF2 Errors ACF01200 and ACF01012 using SFTP

Products

• ACF2 for z/OS
• ACF2

Issue/Introduction

The following ACF2 errors are seen when using SFTP after upgrading from z/OS 2.3 to z/OS 2.4:

ACF01200 Invalid passsword/authority
ACF01012 passsword not matched from SFTP transmission from remote server

Resolution

IBM made a change on SSH config files for z/OS 2.4. On z/OS 2.3, IBM PermitRootLogon was set to YES. Now on z/OS 2.4, IBM PermitRootLogon is set to NO.   

If PermitRootLogin is set to NO in sshd_config, then UID 0 users won't be able to login.

The options are to either use a non-UID 0 user or change the config file to specify YES for this parameter. 

If changing the config file, a recycle of the SSH address space is required for the change to take effect.