TPX v5.2 SP0 and RACF 1.9
 
Recenlty we experienced an issue with TPX when someone who is a "SPECIAL 
USER" whose ID got the following messages:
 
ICH301I MAXIMUM PASSWORD ATTEMPTS BY SPECIAL USER XXXXXXXX AT TERMINAL XXXXXXXX.
*140 ICH302D REPLY Y TO ALLOW ANOTHER ATTEMPT OR N TO REVOKE USER XXXXXXXX .
 
ICH301I MAXIMUM PASSWORD ATTEMPTS BY SPECIAL USER XXXXXXXX AT TERMINAL XXXXXXXX.
*142 ICH302D REPLY Y TO ALLOW ANOTHER ATTEMPT OR N TO REVOKE USER XXXXXXXX .
 
A note for ICH302D says:
    Note: In multiple-user address spaces that have a single signon
   task (such as CICS or IMS(TM)), when the signon task issues
   the message, no other signons can occur until the operator
   has replied to the message.
 
Our operators did not see the outstanding replay until about 25 mins later, at 
which time we took several S0C4 dumps, and several "ICH409I 282-020 ABEND 
DURING RACINIT PROCESSING" messages.
 
Between the time of the RACF messages and the reply, it looks like all TPX 
logon's were held, as we saw many of these in the TPX log:
 TPXL0900 05/06/09.126 07:55:24.72 UNABLE TO CONTINUE DIALOGUE FOR USER: 
AAAAAAAA

Besides maybe having our message automation package reply automatically to the 
ICH302D message, are there any TPX changes we can make? 

In the TPX SMRT table, we have the security system listed as RACF. I came 
across a note in one of the TPX manuals about using SAF instead of RACF. I 
mention this because when I did a search on these RACF messages, one lead 
came back for IBM's CL/SUPERSESSION on this. One of the two things they 
mentioned was changing its setting from RACF to SAF.

Thanks,
 Mark T. Regan, K8MTR
CTO1 USNR-Retired (1969-1991)

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to