Getting acf01108 password phrase expired - but pwphrase profile does not show pwp-exp

Products

• ACF2 - z/OS

Issue/Introduction

Logon fails because password phrase has expired but pwp-exp is not on the pwp profile for the user.
Why is it expired?

 

Resolution

 Passphrase last changed 10/23/23
Last successful signon was 01/20/24
This is  69 days after passphrase change.
The next signon date is 03/11/24
This is 140 days after the passphrase was changed.
The value for maxdays in the GSO PWPHRASE record is 90 days.
140 days is beyond the maxdays 90. This causes the passphrase to be expired.
The maxdays for the password is 0 in the GSO PSWD record - this is why
passwords aren't expired but pass phrases are expired. 

 

Additional Information

Note: PWP-EXP and PSWD-EXP are only set when an administrator sets it to forcce a password change
or changes the password or phrase  and PSWDFRC is set in the GSO PSWD record which forces a new password of phrase at next logon.