search cancel

PASSWORDPREPROMPT - IBM APAR OA44855

book

Article ID: 36872

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC PanApt PanAudit

Issue/Introduction

With APAR OA44855, a new keyword of PASSWORDPREPROMPT was added to the LOGON parameter of the IKJTSO xx parmlib member.  By having PASSWORDPREPROMPT(ON) specified on the LOGON statement of IKJTSOxx the user will be prompted for the password, which must be correct, before the full panel (with user attributes visible) is presented.

Are there any plans to support this APAR under CA ACF2 for z/OS? 

Environment

Release: ACF2 R15.0 

Resolution

CA ACF2 for z/OS replaces the code where this IBM change would take effect. CA ACF2 for z/OS has never allowed a user to see the TSO full screen logon panel without providing a valid Logonid and password. Turning on the IBM option (PASSWORDPREPROMPT in IKJTSOxx) would have no effect in ACF2.

If the reasoning behind using PASSWORDPREPROMPT was to suppress specific ACF2 logon error messages and replace them with a generic one, ACF2 provides the GSO MSGOPTS record. With this record active, any specific error message defined in the MSGS field will be replaced with a “ACF01125 Logon Credentials Invalid” message.

Further information regarding the ACF2 GSO MSGOPTS record can be found in the ACF2 documentation under Generic Message Options (MSGOPTS).

Additional Information

IBM Doc: OA44855: NEW FUNCTION- LOGON PREPROMPT