An ACF2 logonid has been suspended often on a sysplex without any visible errors or by failed password attempts. What can be used to identify why the user is being suspended?
Release : 16.0
Component : ACF2 for z/OS
There are multiple ways that a user can be SUSPENDed in ACF2:
The CSWHO field from a LIST of the logonid will show the user that is setting the SUSPEND bit for the affected user. Also verify the PSWD-VIO count has not reached the limit specified in the GSO PSWD PASSLMT field.
Running a PW report against the SMF active at the time of the suspension will show whether or not the user was suspended due to password violations.
Running an RV report against the SMF active at the time of the suspension will show what/if resource violations were occurring during the time of suspension.
Running a DS report against the SMF active at the time of the suspension will show what/if dataset violations were occurring during the time of suspension.
Relevant documentation:
Logonid Record Fields
ACFRPTPW
ACFRPTRV
ACFRPTDS
GSO OPTS Record
GSO PSWD Record
CICS: SUSPEND-User Suspensions
IMS: Logonid Suspension (SUSPEND)