With APAR OA44855, a new keyword of PASSWORDPREPROMPT was added to the LOGON parameter of the IKJTSO xx parmlib member. By having PASSWORDPREPROMPT(ON) specified on the LOGON statement of IKJTSOxx the user will be prompted for the password, which must be correct, before the full panel (with user attributes visible) is presented.
Are there any plans to support this APAR under CA ACF2 for z/OS?
Release: ACF2 R15.0
CA ACF2 for z/OS replaces the code where this IBM change would take effect. CA ACF2 for z/OS has never allowed a user to see the TSO full screen logon panel without providing a valid Logonid and password. Turning on the IBM option (PASSWORDPREPROMPT in IKJTSOxx) would have no effect in ACF2.
If the reasoning behind using PASSWORDPREPROMPT was to suppress specific ACF2 logon error messages and replace them with a generic one, ACF2 provides the GSO MSGOPTS record. With this record active, any specific error message defined in the MSGS field will be replaced with a “ACF01125 Logon Credentials Invalid” message.
Further information regarding the ACF2 GSO MSGOPTS record can be found in the ACF2 documentation under Generic Message Options (MSGOPTS).