Question:
My user gets message ACF01011 logging on to CICS. I don't see the message in the joblog. Does ACF2 record this somewhere?
ACF01011 LOGONID lid SUSPENDED
Answer:
ACF2 cuts an SMF record for logon failures that will show up in the ACFRPTPW report.
ACFRPTPW Sample Output C
CA ACF2 SECURITY - ACFRPTPW - INVALID PASSWORD/AUTHORITY LOG - PAGE 1
DATE 07/26/98 (98.308) TIME 23.13 LINECNT(58)
DATE TIME LID JNAME SUBMIT’R SOURCE PROGRAM RC L CPU AUTH SECLABEL DEFAULTED
98.308 07/26 15.57 USER001 JOBXXX SUBXXX SSSS PGMXXX 11 SYSX NO
RC FIELD DESCRIPTIONS
11 LOGONID SUSPENDED
-