Hi Elaine, When you reset the password, be sure to use the NOEXPIRED operand on your ALU command like so:
ALU userid PASSWORD(password) NOEXPIRE This will require the password to conform to your current password syntax rules. If the former password no longer conforms to your rules, you'll need to temporarily remove the rules in order to reinstate the former password. After successfully reinstating the prior password, try logging on with the ID and password to confirm they work. I usually use FTP for this purpose. Since this involves a non-expiring password, I assume this ID is being used to log on from another platform for a task like file transfer or remote DB2 calls. It has been my experience that when a non-expiring password stops working, it is never RACF's fault. Instead, it is because the person responsible for the process on the other platform from which the logons are originating has inadvertently changed the password or tried installing the same ID from yet another platform and didn't enter the password correctly. I suggest you look at RACF SMF records for JOBINIT events related to this ID to see where these logons are originating from and verify it is the correct source for these logons. Regards, Bob Robert S. Hansel *** Celebrating 30 years working with RACF *** Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com ---------------------------------------------------------------------------- Upcoming RSH RACF Training - WebEx - RACF Audit & Compliance Roadmap - MAY 15-19, 2017 - RACF Level I Administration - APR 25-28, 2017 - RACF Level II Administration - NOV 13-17, 2017 - RACF Level III Admin, Audit, & Compliance - APR 3-7, 2017 - RACF - Securing z/OS UNIX - OCT 23-27, 2017 ---------------------------------------------------------------------------- -----Original Message----- Date: Mon, 20 Mar 2017 11:44:01 -0500 From: Elaine Beal <elaine.b...@gxs.com> Subject: RACF Non-expiring passwords We have a non-expiring password that we've used for years and somehow failed the other night. I reset with an alu line command but the new password doesn't work. When I go through the panels it says the current password isn't valid. We have changed password rules but I don't see where that matters. I set the new password to existing rules and do not get any errors on the alu. Thanks, Elaine ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
