IKJ56421I With TSO Signon

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Description

When a user tries to signon to TSO, the user fails with:
IKJ56421I PASSWORD NOT AUTHORIZED FOR USERID

Solution

Check to make sure that the user and TSO facility are not in DORM mode.

To check the user, issue:
TSS LIST(acid) DATA(XAUTH)
and make sure there are no permits on the ACID for MODE(DORM).

To check the TSO facility, issue:
TSS MODIFY(FACILITY(TSO))
and find the line with:
TSS9553I MODE=mode DOWN=down LOGGING=log options

In DORM mode (with NODORMPW set on the TSO facility), the UADS password is required to signon, not the CA Top Secret password.

If the user is either defined or not defined in UADS and the user has a TSO segment on the CA Top Secret ACID, the CA Top Secret password is required regardless of whether DORMPW or NODORMPW is set on the TSO facility.

Environment

Release:
Component: AWAGNT