ACF2 - Suspend ID when a number of Security Violations reached

Products

• ACF2 - z/OS

Issue/Introduction

ACF2 setting for Global System Option (GSO) to suspend an ID when a number of security violations are reached.

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

With the ACF2/CICS interface, if the ACF2/CICS ACF2PARM SUSPEND parameter is set for:

PASSWORD=YES or RULE=YES the ACF2/CICS interface will turn on the loognid SUSPEND bit when either the password violations(GSO PSWD record PASSLMT) or the security violations(OPTION MAXVIO parameter) are exceeded and the CSWHO will specify the CICS region's logonid.

There is another product/interface that can cause a logonid to be suspended based on password or security violations. The ACF2/IMS interface works similar to the ACF2/CICS interface which based on configuration parameters the IMS interface can suspend a user's logonid.