Can the GSO PWPHRASE restrictions be overridden in the ACF2 NPWPEXIT?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Can the GSO PWPHRASE restrictions be overridden in the ACF2 NPWPEXIT?

Environment

Release:
Component: ACF2MS

Resolution

The NPWPEXIT can interrogate a password phrase and pass a return indicating whether the password phrase is valid or invalid.
Once the exit has decided that the password is acceptable, it will then be validated against the global PWPHRASE restrictions.

The ACF2 NPWPEXIT cannot override any of the GSO PWPHRASE restrictions. The GSO PWPHRASE restrictions are GLOBAL setting that apply to all users.

The following are the ACF2 GSO PWPHRASE restrictions that can be enforced when a LOGONID's password is changed at system entry time or from the ACF CHANGE or INSERT commands.

ALPHA(0|nnn)
Specifies the minimum number of alphabetic characters (a-z or A-Z) required in a new password phrase.

LID|NOLID
Specifies that a logonid cannot be contained in any part of a new password phrase.

MAXLEN(100|nnn)
Specifies the global maximum number of characters allowed in a new password phrase.

MINDAYS(0|nnn)
Specifies the global value for the minimum number of days that must elapse before a password phrase can be changed.

MINLEN(9|nnn)
Specifies the global minimum number of characters required in a new password phrase.

MINWORD(1|nnn)
Specifies the global minimum number of words required in a new password phrase.

NUMERIC(0|nnn)
Specifies the minimum number of numeric characters (0-9) required in a new password phrase.

REPCHAR(null|0|nn)
Specifies the number of consecutively repeating pairs of characters allowed in a new password phrase.

SPECIAL(0|nnn)
Specifies the minimum number of special characters required in a new password phrase.

SPECLIST()
Specifies the list of valid, non-alphanumeric characters that may be contained in a new password phrase in addition to default alphanumeric (a z, A-Z, 0-9), national (@ # $) characters and blanks (spaces).

Additional Information: 

Details on the NPWPEXIT can be found in the "Chapter 7: User Exits" of the CA ACF2 for z/OS System Programmer Guide.
Details on the GSO PWPHRASE record can be found in the "Chapter 14: Maintaining Global System Options Records" of the CA ACF2 for z/OS Administrator Guide.