Sorry Alan, but wih RAC ALTUSER, the password you set will be an expired 
one, the user will have to change it when he logs on.

An assembler program is required to use RACROUTE.  I have such an animal 
that I can send on request.  You need access to both the old and the new 
password in order to make it work.  I don't know if these are available in 
the DIRMAINT exit.

Kris,
IBM Belgium, VM customer support




Alan Altmark <[EMAIL PROTECTED]> 
Sent by: The IBM z/VM Operating System <[email protected]>
2006-05-11 23:37
Please respond to
The IBM z/VM Operating System


To
[email protected]
cc

Subject
Re: RACF & DIRM PW





On Thursday, 05/11/2006 at 09:15 CST, Lee Stewart
<[EMAIL PROTECTED]> wrote:
> Assuming that you have both DIRMAINT and RACF on a system, is there a
> way to:
> - Have DIRM PW change the RACF password?
> - Have DIRMAINT either reject a DIRM PW request, or invalidate the
> command or something to tell the user they have to use the RACF command?
>
> I've looked and looked through the DIRMAINT and RACF manuals and the
> closest I can find is writing a DIRMAINT password validataion exit that
> always rejects the password...

If you have z/VM 5.2, CONFIGRC SAMPDVH activates a new set of exits that
work closely with RACF.  In prior versions of DirMaint, you can use the
PASSWORD_CHANGE_NOTIFICATION_EXIT to set the RACF password via RAC
ALTUSER. Also look at COMMAND_BEFORE_PROCESSING exit if you want to stop
the DIRM PW altogether.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to