PSWDPAIR set to 2 allows 3 of the same characters in a row. How can I make it allow just 2?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

Description:

I have the GSO PSWD record set with PSWDPAIR(2). I did a password change like this;

CHANGE logonid PASSWORD(ABBBCDEF).
This is allowed. Why?

Shouldn't that stop at 2 BBs and prevent the password from being accepted?

Solution:

PSWDPAIR describes the number of "pairs" of characters that are allowed in a password. 3 consecutive characters are actually two "pairs".

If you look at the password being tried, ABBBCDEF - the first 2 Bs is one pair (immediately after the A), the 2 Bs before the C is another pair.

To only allow one pair of Bs (BB) in the password, then the parameter setting needs to be PSWDPAIR(1).

Environment

Release:
Component: ACF2MS

Resolution

-