How to LIST ACF2 logonids with MAXDAYS less than a specified amount of days

Products

• ACF2 - z/OS
• ACF2
• ACF2 - MISC

Issue/Introduction

When trying to list all the users that have MAXDAYS less than 30, the following command is issued:

LIST LIKE(-) IF(MAXDAYS<30)

This reports back a lot of logonids including ones that do not have the MAXDAYS parameter set.

The GSO PSWD parameter PSWDMAX is set to 30, but when issuing the following command no logonids are getting listed:

LIST LIKE(-) IF(MAXDAYS=30)

Why is ACF2 behaving this way and how is it possible to get an accurate list of logonids?

 

Environment

Release : 16.0

Resolution

The LIST command only takes the information in the LID record into account. It will not report on information from the GSO records.

The default for the MAXDAYS field in the logonid record if nothing is specified is 0. This is why logonids with no MAXDAYS are being returned.

If no logonids are being listed with MAXDAYS=30, then the following command can be used to report on users who have a MAXDAYS field that would override the GSO record:

LIST LIKE(-) IF(MAXDAYS NE 0)

Taking this a step further, the following command will show all logonids that have a MAXDAYS setting less than or equal to 30 but not zero:

LIST LIKE(-) IF(MAXDAYS NE 0 AND MAXDAYS LE 30)

Additional Information

Audited by Michael Blaha on 10/12/2023