ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

ACF2 Errors ACF01200 Invalid passsword/authority and ACF01012 passsword not matched from SFTP transmission from remote server.

book

Article ID: 236807

calendar_today

Updated On:

Products

ACF2 - z/OS ACF2

Issue/Introduction

ACF2 Errors ACF01200 Invalid passsword/authority and  ACF01012 passsword not matched from SFTP transmission from remote server. This has occurred after upgrading from z/OS 2.3 to z/OS 2.4

Environment

ACF2 release 16.0

Resolution

On z/OS 2.3, IBM Permit Root Logon was set to YES.

Now on z/OS 2.4, IBM Permit Root Logon was set to NO.   

IBM made a change on SSH config files for z/OS 2.4.

If PermitRootLogin is set to no in sshd_config then UID 0 users won't be able to login.

The client's options were to use a non-UID 0 user or change the config file to specify yes for this parameter.

When specifying yes and recycling the SSH address space, the user was authenticated properly.

Summary of changes for z/OS Version 2 Release 4 (V2R4) and its updates:

Root login using a password is no longer enabled by default.

SSH server root login

Root login using a password is no longer enabled by default. For compatibility reasons, this has been re-enabled in the sample sshd_config file, but you should consider disabling this.

 

Additional Information

z/OS OpenSSH User's Guide z/OS Version 2 Release 4