All,

>From the research I have done I agree with Walt in that it¹s a TSO
restriction.

If you logon (Full screen mode) and enter a numeric Userid you get the not
valid message, press F1 and there is the message from TSO.

Hence, my thinking I may be able to get at the field in a TSO EXIT and
bypass the numeric check.

The fact that ACF2 supports it means it can be done and from what I am
seeing there are no issues with MVS commands, INTRDR, etc.

Looks like I go back to the manuals to see if I can figure this out.

Mark



On 23/07/2008 03:00, "Walt Farrell" <[EMAIL PROTECTED]> wrote:

> On 7/22/2008 6:15 PM, Barry Schrager wrote:
>> > I agree -- HASP has nothing to do with this.  The 7 character limit was
>> > imposed because submitted jobs had the Userid as the first 7 characters
>> > and had to attach another character/digit to make the submitted jobname
>> > unique.
>> >
>> > It never occurred to us that you might have 7 digit Userids when we
>> > created ACF2.  That, it works, is a surprise to me.  I guess that by
>> > bypassing UADS, nobody checks -- but RACF obviously does.
>> >
> Interesting, Barry.  RACF doesn't check, and fully supports numeric user
> IDs.  It has to be a TSO/E restriction, and I'm pretty sure that the
> standard TSO/E logon command parsing (and full-screen validation) will
> reject a numeric user ID, so I always figured it was done with logon
> exits and/or replacement of the logon command when another security
> product does allow it.
> 
> --
>     Walt Farrell, CISSP
>     IBM STSM, z/OS Security Design
> 
> 
> 
> 

 
_______________________________________
Mark Wilson
 
Mobile: +44 (0) 7768 617006
Email:   [EMAIL PROTECTED]
 
Chairman GSE Large Systems Working Group.
Large Systems Web Site is:
http://lsx.gse.org.uk/
_______________________________________



----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to