Good point, the original question was how to force users to use phrases instead of passwords, which is quite easy.
Potentially much more difficult is making sure all applications that accept an ID and PW support a 100 character password field and know what to do with that data depending on whether the length entered is 1-8 or 9-100 characters. TSO requires a change in PARMLIB(IKJTSO00), I believe CICS has a different log on trans (CESL vs. CESN), and I believe FTP supported long PWs with no changes. You would really need to look at every logon processing application in your shop. Tom Chicklon From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Colin Paice Sent: Wednesday, June 14, 2023 11:12 AM To: [email protected] Subject: Re: RACF passphrase support My logon screen only has space for an 8 char password. See Activating password phrase support <https: //urldefense. com/v3/__https: //www. ibm. com/docs/en/zos/2. 5. 0?topic=process-activating-password-phrase-support__;!!MwwqYLOC6b6whF7V!kylPYKnwdjWq2zinwEHX6KCGkN7b-FOLONDAQXt48DW1bdf5DxDIMxHFDZ0Gxj-G1aZW8BUTita5a-dbsu_xn3dQ$> My logon screen only has space for an 8 char password. See Activating password phrase support <https://urldefense.com/v3/__https://www.ibm.com/docs/en/zos/2.5.0?topic=process-activating-password-phrase-support__;!!MwwqYLOC6b6whF7V!kylPYKnwdjWq2zinwEHX6KCGkN7b-FOLONDAQXt48DW1bdf5DxDIMxHFDZ0Gxj-G1aZW8BUTita5a-dbsu_xn3dQ$<https://urldefense.com/v3/__https:/www.ibm.com/docs/en/zos/2.5.0?topic=process-activating-password-phrase-support__;!!MwwqYLOC6b6whF7V!kylPYKnwdjWq2zinwEHX6KCGkN7b-FOLONDAQXt48DW1bdf5DxDIMxHFDZ0Gxj-G1aZW8BUTita5a-dbsu_xn3dQ$>> on how to change it. On Wed, 14 Jun 2023 at 15:30, Chicklon, Thomas < [email protected]<mailto:[email protected]>> wrote: > Probably the easiest would be to remove a user’s password and set a phrase > for them. > > ALU userid NOPASSWORD PHRASE(‘This user must use a phrase now’) EXPIRED > > Tom Chicklon > > From: IBM Mainframe Discussion List > <[email protected]<mailto:[email protected]>> On Behalf > Of rpinion865 > Sent: Wednesday, June 14, 2023 9:25 AM > To: [email protected]<mailto:[email protected]> > Subject: RACF passphrase support > > If I want to move away from passwords and use passphrases, how do I force > users to use passphrases, i. e. RACF exit(s)? Sent with [Proton > Mail](https: //urldefense. com/v3/__https: //proton. > me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$) > > > If I want to move away from passwords and use passphrases, how do I force > users to use passphrases, i.e. RACF exit(s)? > > > > Sent with [Proton Mail]( > https://urldefense.com/v3/__https://proton.me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$<https://urldefense.com/v3/__https:/proton.me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$%3e> ><https://urldefense.com/v3/__https:/proton.me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$%3e>< > https://urldefense.com/v3/__https:/proton.me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$>)<https://urldefense.com/v3/__https:/proton.me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$%3e)%3e> ><https://urldefense.com/v3/__https:/proton.me/__;!!MwwqYLOC6b6whF7V!g4K8lA4n8TXZEHOf91ceeBwpEiRFj0H1g790KV4_VVVs7EeisjYHAMzTyuUxvBny2g-VoVTM6v3WrjPby9VOaAp0mKbSfYGR7_0dTg$%3e)%3e>secure > email. > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to > [email protected]<mailto:[email protected]<mailto:[email protected]%3cmailto:[email protected]>> > with the message: INFO IBM-MAIN > > This e-mail transmission contains information that is confidential and may > be privileged. It is intended only for the addressee(s) named above. If > you receive this e-mail in error, please do not read, copy or disseminate > it in any manner. If you are not the intended recipient, any disclosure, > copying, distribution or use of the contents of this information is > prohibited. Please reply to the message immediately by informing the sender > that the message was misdirected. After replying, please erase it from your > computer system. Your assistance in correcting this error is appreciated. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected]<mailto:[email protected]> with > the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected]<mailto:[email protected]> with the message: INFO IBM-MAIN This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
