When an incorrect password is entered the requisite number of times for a user 
with SYSTEM SPECIAL, a WTOR is presented to the operator.  The user is not 
revoked unless the operator responds to that WTOR specifying the user should be 
revoked.  If that is indeed what happened, the operator needs some additional 
training.

The fact that one user has been revoked should not prevent any other user from 
logging on.  What happens when a different user tries?  If all user logons 
fail, it is a different issue.  What updates were made to the system when this 
started happening?

The message is a TSO message (specifically from the logon command processor), 
not a RACF one.  My manual says the message number should be 56443, not 6644.  
Which version of TSO are you running?  The message addresses a reconnect issue. 
 What happens when the user logs on without specifying reconnect?

Does your system have only one user with SYSTEM SPECIAL?  Another user with 
proper authority should be able to resume the revoked user.

Are batch jobs being affected?  If not, the problem may be limited to TSO.  A 
batch job may be able to resume the user

> -----Original Message-----
> From: IBM Mainframe Discussion List <[email protected]> On
> Behalf Of saurabh khandelwal
> Sent: Saturday, August 04, 2018 4:20 AM
> To: [email protected]
> Subject: RACF Special User Revoked System
> 
> Hello Group,
> 
> We are facing issue that someone by mistake used wrong password on special
> user and this end up revoking anybody to login to our system .
> 
> RACF is not allowing anybody to login. But strange part is, we dont see any
> outstanding message on console related to this special user. But when this
> yser try to login to system we get below message,
> 
> IKJ5644I TSOLOGON RECONNECT REJECT - USER ACCESS REVOKED BY
> RACF
> 
> Now, is there any way to solve this issue apart from flash copy of older
> RACF dataset disk . Is there any resume command or some thing else we can
> use from console to make the system available for rest of users.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to