Message ACF01061 received when attempting to sign on

Products

• ACF2 - z/OS
• ACF2 - MISC
• ACF2

Issue/Introduction

User is receiving the following message when trying to sign on: 

ACF01061 SYSTEM ACCESS DENIED - LOGON TIME NOT WITHIN SHIFT DEFINED FOR USER.

What is causing this and what is needed to prevent it?

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Cause

It is possible to set the SHIFT parameter on the LID record Shift records validate access to the system, data sets, and resources based on the time of day you specify. ACF2 stores shift records in the Infostorage database. They define the days, dates, and times when users can access the system. 

In other words, if the user tries to access the system outside of the time period set for their SHIFT record, they will receive the ACF01061 message.

Resolution

First check if the user has the SHIFT attribute set on their LID record. This can be done by issuing a simple LIST <lid> ACF2 subcommand.

Example:

TSO ACF

LIST USER01                                                                 
  USER01                       USER01                                  
                       COMPANY(S) DEPT() IDNUM() LEVEL(1) LOCATION(ZZZZ)      
                       OLDLID() OWNER() OWNTYPE() POSITION() PROJECT() SITE(2)
  CANCEL/SUSPEND       TRACE                                                  
  PRIVILEGES           ACTIVE(06/12/89) CICS DUMPAUTH JOB PWPALLOW   
                       REFRESH TSO VM                                
  ACCESS               ACC-CNT(216) ACC-DATE(04/11/22) ACC-SRCE(A28TC001)     
                       ACC-TIME(03:08)                                        
  PASSWORD             KERB-VIO(0) KERBCURV() PSWA1TOD(05/06/21-09:42)        
                       PSWA2TOD(00/00/00-00:00) PSWD-DAT(00/00/00) PSWD-INV(0)
                       PSWD-SRC(A28TC002) PSWD-TIM(08:09)                     
                       PSWD-TOD(05/06/21-09:42) PSWD-VIO(0) PSWDCVIO(10)      
                       PWP-DATE(00/00/00) PWP-VIO(0)                          
  TSO                  ATTR2(9999) DFT-PFX8(USER01) DFT-SOUT(A) DFT-SUBM(A) 
                       INTERCOM JCL LGN-ACCT LGN-PROC LGN-SIZE LINE(ATTN) MAIL
                       MODE MSGID NOTICES OPERATOR PROMPT TSOACCT(0000013)    
                       TSOFSCRN TSOPROC(PROCXXXX) TSORGN(2,147,483,647)       
                       TSOSIZE(4,096) WTP                                     
  STATISTICS           CRE-TOD(05/06/21-09:41) SEC-VIO(0)                     
                       UPD-TOD(04/11/22-03:08)                                
  CICS                 CICSCL(999999) CICSRSL(999999)                         
  RESTRICTIONS         GROUP(DFTGRP) PREFIX(USER01) SHIFT(TSOSHIFT)                        

Then do a LIST on the SHIFT record:

TSO ACF

SET SHIFT(SFT)

LIST TSOSHIFT

 ACF6A062 SHIFT TSOSHIFT STORED BY ADMIN ON 02/03/21-15:30
  DAYS(MO,TU) TIME(0800-1700,0900-1800)                     

Then evaluate if the SHIFT attribute is needed for the user. If it is needed, please adjust the SHIFT record to his/her business needs.

Additional Information

Shift and Zone records documentation