I believe that a RACF user exit requires at least one IPL to install in order 
to build an entry in the RCVT. However, once an exit has been defined via IPL, 
you can update the running copy with standard tricks of the trade. Otherwise 
you might need a lot of IPLs to get an exit working properly. You could even 
start with a 'BR14' version with the intent of replacing it with real code as 
you go along. For debugging pesky problems, SLIP TRACE is your best friend. 

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
[email protected]


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Walt Farrell
Sent: Thursday, September 01, 2016 6:33 AM
To: [email protected]
Subject: (External):Re: ICHPWX01 sample problem

On Wed, 31 Aug 2016 23:12:30 +0200, R.S. <[email protected]> wrote:

>I installed an exit from RACF downloads page.
>I'm trying to use rule override.
>The user TEST1 has READ access to CL(FACILITY) IRR.ICHPWX01.OVERRIDE 
>Changes were refreshed.
>
>However during TSO logon the new password is rejected.
>The password is compliant to the SETR rules.
>I tried to set the IRR.ICHPWX01.OVERRIDE into WARN mode, no effect.
>
>AFAIK the profile is checked by "assembler" part of the exit, The 
>system is /zOS 2.2
>
>Any clue?
>Is it possible to find out whether password is rejected by the exit or 
>because of other reasons?

Probably a better question for RACF-L than IBM-MAIN.

However, when last I checked, installing ICHPWX01 requires a re-IPL in order 
for the exit to take effect.

--
Walt


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to