RACF Support for IBM Multi-Factor Authentication for z/OS (IBM MFA): https://www.ibm.com/support/knowledgecenter/SSLTBW_2.3.0/com.ibm.zos.v2r3.izsm100/abstract.htm Abstract for RACF Support for IBM Multi-Factor Authentication for z/OS (IBM MFA)<https://www.ibm.com/support/knowledgecenter/SSLTBW_2.3.0/com.ibm.zos.v2r3.izsm100/abstract.htm> Purpose of this information This information is a collection of all of the information that you need to understand and exploit the IBM Multi-Factor Authentication for z/OS (IBM MFA). Some of the information also exists elsewhere in the z/OS library. www.ibm.com
________________________________ From: IBM Mainframe Discussion List <[email protected]> on behalf of Paul Gilmartin <[email protected]> Sent: Saturday, January 9, 2021 11:14 AM To: [email protected] <[email protected]> Subject: Re: Code to verify LOGON password On Sat, 9 Jan 2021 00:12:07 -0600, Brian Westerman wrote: > >With some restrictions, I think that just issuing the RACROUT request=verify, >would be okay. There should probably be some mechanism to revoke the ID if >there are two many guesses though. > Among these, I wonder about MFA. Does RACF support MFA? Why is sftp unable to mask the password entry on a 3270 while FTP does so readily? I once submitted an SR that tcsetattr() suppresses ECHO on a linemode terminal but not a 3270. IBM rejected it. -- gil ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
