Andreas, RACF itself has practically all the functionality built-in that you are looking for. If I remember correctly, - RACF Configuration options allow the retention of (x) previous passwords within the RACF database. - password syntax options (length, valid characters, repeat strings, etc.) - a password validation exit that allows you to perform additional checks above and beyond those provided by RACF
Once the rules (and/or exit) have been set up, a user who changes the password will not be able to create a new password that violates these rules. No need for a homegrown application ... Regards, Ulrich Krueger P.S.: Herzliche Grüsse aus Kalifornien -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Andreas Lerch Sent: Monday, February 25, 2008 09:21 To: [email protected] Subject: RACF callable service to check (new) password Dear MVS Team main: RACF sub: password verification Hi - i am looking for a callable service to verify a new password against the currntly given RACF-roules without a valid userid. My company would change the administation of users. They take a lot of $ to administrate users of their system. To reduce the costs and to use the affort of RACF, i am looking for a callable (COBOL) service, to verify the new password in the rules of RACF. We use CICS with a self made login panel. To restrickt the new password, we use a VSAM-dataset for the last ?? passwords - MD5 hashes - for new passwords we want to delete such formats like keyboard repeats: i.e. asdfg or sdfgh and words like: may, jun and any more. RACF does this simple check, but nowadays my only knowlage is, that i must have a real, RACF-defined userid. Can i use the RACF-rules for new passwords without to have a RACF-defined userid? thank you for your help einen schoenen Tag Andreas Lerch ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
