ACF2 Errors ACF01200 Invalid passsword/authority and ACF01012 passsword not matched from SFTP transmission from remote server. This has occurred after upgrading from z/OS 2.3 to z/OS 2.4
ACF2 release 16.0
On z/OS 2.3, IBM Permit Root Logon was set to YES.
Now on z/OS 2.4, IBM Permit Root Logon was set to NO.
IBM made a change on SSH config files for z/OS 2.4.
If PermitRootLogin is set to no in sshd_config then UID 0 users won't be able to login.
The client's options were to use a non-UID 0 user or change the config file to specify yes for this parameter.
When specifying yes and recycling the SSH address space, the user was authenticated properly.
Summary of changes for z/OS Version 2 Release 4 (V2R4) and its updates:
Root login using a password is no longer enabled by default.
SSH server root login
Root login using a password is no longer enabled by default. For compatibility reasons, this has been re-enabled in the sample sshd_config file, but you should consider disabling this.