Password/PassPhrase validation not performed during login via XMS using VTAM APPLID

Products

• View

Issue/Introduction

I can enter into VIEW without specifying a password on the login credentials panel. If I just enter a valid RACF userid I am able to successfully logon to VIEW.

We are logging on to VIEW through an XMS task via VTAM APPLIED.

How can we configure XMS so that users must enter a password, and have RACF perform password validation?

Environment

View, 14.0, vtam, xms, ebc, cross communication, logon, login, password, validation, pass phrase, lgnsec, racf, top secret, acf2, security, signon

Cause

XMS task configuration problem.

Resolution

- When you configure your XMS task with "LGNSEC=YES" , validation is ONLY done on the USERID, not the password. (Excerpt from View documentation below):

YES
External security checking is performed using SAF calls.
External security verifies userid only for all cross-memory interfaces (with no interruption to the user)...

- Instead of above, if you want both USERID and PASSWORD to be validated, try changing your XMS task configuration to "LGNSEC=YESP" or "LGNSEC=PPHRASE" and see if that gets you the functionality that you need. (Excerpts from View Documentation below):

YESP
External security checking is performed using SAF calls.
External security verifies userid and password for all cross-memory interfaces (with no interruption to the user).
A panel is presented to the user to verify the userid and password. This panel is only presented when the user interface does not automatically send the userid and password to the XMS region.

PPHRASE
External security checking is performed using SAF calls.
External security verifies userid and password phrase for all cross-memory interfaces (with no interruption to the user).
A panel is presented to the user to verify the userid and password phrase. This panel is only presented when the user interface does not automatically send the userid and password phrase to the XMS region.