How can a password for an ACF2 logonid be created so that it will never expire?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

How can a password for an ACF2 logonid be created so that it will never expire?

 

Environment

Release:
Component: ACF2MS

Resolution

The MAXDAYS and LIDZMAX fields of the logonid can be used to make a user's password never expire.

When the MAXDAYS field of the user's logonid is set to 0 along with the LIDZMAX flag the user's logonid will never expire.

From TSO:
ACF
SET LID
CHANGE logonid MAXDAYS(0) LIDZMAX
MAXDAYS and LIDZMAX field descriptions from the ACF2 Administrator Guide, Maintaining Logonid Records Chapter:

MAXDAYS(days)
Specifies the maximum number of days (based on the date specified in the PSWD-TOD field) permitted between password changes before the password expires.

LIDZMAX | NOLIDZMAX
Specifies that a zero value for the MAXDAYS field in the LIDREC will override the global PSWDMAX value in the GSO PSWD record.

Note when MAXDAYS is set to zero, the MAXDAYS field will not be displayed when listing a logonid.
To list a logonid(s) that has MAXDAYS(0) there are two ooptions.

1) From TSO, ACF:

     ACF
     LIST like(logonid mask) IF(MAXDAYS=0)

2) Using the ACFRPTSL report. Sample JCL:

  //REPORT  EXEC PGM=ACFRPTSL         
  //SYSPRINT DD SYSOUT=*              
  //SYSIN    DD *                     
   TITLE(LIST LIDS WITH MAXDAYS 0)      
   INPUT(ACF2)                        
   REPORT(SHORT)                      
   SFLDS(MAXDAYS)                     
   IF(MAXDAYS EQ 0)                   
  /*