How to List ACF2 the password rules, expiration cycle and other password configuration settings?

Products

• ACF2 - z/OS

Issue/Introduction

How to list the password rules, and the expiration cycle, and the number of times before revoke. This should all be in the GSO password information.

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The TSO ACF, SHOW PSWD command can be used to display your GSO PSWD settings. For example:

ACF
SHOW PSWD
PASSWORD (PSWD) OPTIONS IN EFFECT:                                             

                                                                               
OPTION             OPTION DESCRIPTION                                          
================== ============================================================
CLEARVIO = YES     RESET PSWD VIO COUNTS AT SUCCESSFUL SIGN-ON                 
MAXTRY   = 7       MAXIMUM NUMBER OF SIGN-ON ATTEMPTS ALLOWED                  
MINPSWD  = 1       MINIMUM NUMBER OF CHARACTERS REQUIRED                       
ONEPWALG = NO      ONLY STORE ONE TYPE OF ENCRYPTED PASSWORD                   
PASSLMT  = 7       MAXIMUM NUMBER OF INVALID SIGN-ON ATTEMPTS ALLOWED PER DAY  
PSWDALPH = NO      AT LEAST ONE ALPHABETIC CHARACTER REQUIRED                  
PSWDALT  = YES     ALLOW USERS TO ENTER NEW PSWD AT SIGN-ON                    
PSWDENCT = AES1    PSWD ENCRYPTION ALGORITHM UTILIZED                          
PSWDFRC  = YES     FORCE USER TO ENTER NEW PSWD AT SIGN-ON                     
PSWDHST  = NO      PSWD CANNOT MATCH 4 PREVIOUS PSWDS                          
PSWDJES  = NO      INVALID PSWD ATTEMPT IN JES INCREMENTS PSWD-VIO COUNT       
PSWDLC   = NO      AT LEAST ONE LOWERCASE CHARACTER REQUIRED                   
PSWDLID  = NO      PSWD CANNOT MATCH USER LID                                  
PSWDMAX  = 0       MAXIMUM NUMBER OF DAYS TO ELAPSE FOR A PSWD CHANGE          
PSWDMIN  = 0       MINIMUM NUMBER OF DAYS TO ELAPSE FOR A PSWD CHANGE          
PSWDMIXD = NO      ALLOW CASE-SENSITIVE CHARACTERS IN PSWD                     
PSWDNAME = 0       # OF CONSECUTIVE CHARACTERS THAT PSWD CANNOT MATCH IN NAME  
PSWDNCH  = NO      USER CANNOT UPDATE PSWD WITH CHANGE COMMAND                 
PSWDNMIC = NO      AT LEAST ONE NUMERIC CHARACTER REQUIRED                     
PSWDNUM  = NO      PSWD CANNOT CONTAIN ALL NUMERIC CHARACTERS                  
PSWDPAIR = N/A     NUMBER OF CONSECUTIVE REPEATING CHARACTERS ALLOWED          
PSWDPLID = NO      PSWD CANNOT CONTAIN USER LID                                
PSWDPLST =         *                                                           
PSWDREQ  = NO      PSWD REQUIRED FOR ALL LIDS EXCEPT STC OR RESTRICT LIDS      
PSWDRSV  = NO      PSWD CANNOT BEGIN WITH A RESERVED WORD PREFIX               
PSWDRSVW = NO      PSWD CANNOT CONTAIN A RESERVED WORD                         
PSWDSIM  = 0       NUMBER OF CONSECUTIVE SIMILAR CHARACTERS NOT ALLOWED        
PSWDSPLT = NO      AT LEAST ONE NATIONAL OR USER-DEFINED CHARACTER REQUIRED    
PSWDUC   = NO      AT LEAST ONE UPPERCASE CHARACTER REQUIRED                   
PSWDVFY  = NO      USER REQUIRED TO VERIFY NEW PSWD                            
PSWDVOWL = YES     ALLOW VOWEL CHARACTERS IN PSWD                              
PSWDXTR  = NO      ALLOW AUTHORIZED PROGRAMS TO EXTRACT PSWD                   
PSWNAGE  = YES     DO NOT INCLUDE TEMPORARY PSWD IN PSWD HISTORY               
PSWXHIST = YES     PSWD CANNOT MATCH UP TO 64 PREVIOUS PSWDS                   
PSWXHST# = 5       NUMBER OF PREVIOUS PSWDS TO RETAIN                          
WRNDAYS  = 90      NUMBER OF DAYS WARNING IS ISSUED BEFORE PSWD EXPIRES