I am trying to logon to a User ID without specifying a password. I set the User ID's password to NOPASS, a reserved word, and I get a CP error message.

Products

• Mainframe VM Product Manager
• VM:Manager Suite for Linux on Mainframe
• VM:Manager Suite for z/VM
• VM SUITE
• VM:Secure for z/VM

Issue/Introduction

Desription:

I am trying to logon to a User ID without specifying a password. I set the User ID's password to NOPASS, a reserved word, and I get the following CP error message:

LOGON USA1234
HCPLGA050E LOGON unsuccessful--incorrect password

According to CP's documentation, the User ID should logon without a logon prompt. There is no password prompt, but as you see I get an incorrect password message. The HCP message appears immediately.

Solution:

When using VM:Secure as your external security manager, you need to provide a rule to allow a user to be logged on to without a password. VM:Secure will not honor the CP special password of NOPASS.

In a user rules file:
ACCEPT * LOGON (NOPASS
any terminal can log on to this user without a password.
You can specify a terminal id to further qualify this.

Though this can be a convenient way to allow logon to a general VM User ID, it is highly recommended that you code specific VM:Secure rules to allow access to any user on your system. Using the LOGON BY rules can allow many users to log on to a particular User ID by specifying their own logon password. This method provides greater security to your system. For many customers, having a way to log on to a User ID without some type of verification is a security violation.

Environment

Release:
Component: VMX