You don't even actually need RACF or ACF2 or TSS to generate a PassTicket. You can actually do it yourself. The algorithm is public. You can do it in Rexx. http://2000clicks.com/links/Computers/IBMMainframeHistory/passtkt.htm#ptktge n You do need the 16-digit key, and without RACF and the like you have key management issues for that key.
Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Grinsell, Don Sent: Tuesday, February 07, 2012 3:07 PM To: [email protected] Subject: Re: RACF Passticket: password required on userid? It works the same in ACF2. The passticket generator has no idea that the logonid is restricted (or protected) so a passticket is generated. However, passwords and by extension passtickets, are not allowed for these logons and so the request is appropriately rejected. Set a complex non-expiring password on the logonid and then use passtickets to your heart's content. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
