Mr. Farrell, I'm a little confused. I know I can EXclude words/characters with ICHPWX01, but how would I INclude rules that require the national (or any other) characters in the exit? Noting that I am not an Assembler programmer by nature, please use small, easy-to-understand words. Many thanks.
Doc Farmer -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Wednesday, January 03, 2007 09:27 To: [email protected] Subject: Re: RACF - Password rules. On 1/2/2007 2:55 PM, Karthick wrote: > We have planned to implement the following password rules in RACF. > > Passwords Syntax: > * Restrictions on repeated characters > * Alphanumeric passwords, including special characters, upper case, > and lower case. > > Please advice with informations or procedures or what EXIT need to be > used. > To restrict repeated characters you would use ICHPWX01, the new password exit, described in the RACF System Programmers Guide. For your second one: (a) you can not easily allow lower-case characters unless you're at z/OS R7 or later, and in that case you do not need an exit, but can simply use the password rules. (b) You can not easily allow special characters other than the three "national" characters $, #, or @ even using a RACF exit. You can allow use of $, #, or @ without an exit, but to require them you would need ICHPWX01, again. Walt Farrell, CISSP z/OS Security Design, IBM ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
