On Sun, 4 Dec 2022 at 13:28, Pierre Fichaud <[email protected]> wrote:

> For function code PREINIT and POSTINIT, a pointer to a passphrase area can
> be supplied in the exit's parameter list.
> I created 2 ACIDs, one with a passphrase and the other without a
> passphrase.
> When logging on with either one, I never see a pointer to the passphrase
> area.
>
> 1) How can I drive PREINIT ad POSTINIT so that the pointer to the
> passphrase area exists?
>

I have never tried to use either of these exits. But...  Where are you
looking? TXACPHRA? Or TXAIPHRA? The offsets are different for the Init and
Change cases.

2) How can the PASSWORD and PASSPHRASE functions be driven?
>     I've tried various TSS commands but none of them drive either exit.
>

In my experience the most reliable exit point to use for just about
everything in TSS is the Security File Change one. This has potential
pointers to a lot of useful stuff, including the command text (if there is
a command, and even in one case if there isn't one!), old and new passwords
and phrases, and more. To differentiate passwords from phrases, you need to
look at the 1-byte Recovery File code - take care as some of them are lower
case (e.g. h and H mean different things), and there are also different
codes for phrases and "long passwords". Depending on the code, there may be
a pointer to the RACROUTE parameter list, from which you can find the
password or phrase. Unfortunately if it was a command, you may have to
parse it yourself.

But of course this won't help you if you want to examine a new password or
phrase and possibly reject it, because it's too late.

Tony H.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to