It would be more helpful if everyone would reply with what they know to be a fact. It has been stated that every RACF ID must have a password. I added a new user to my system and only created a password phrase.
I was able to logon to TSO using the password phrase. So, it does not seem to be true that a password is required unless RACF created some random password, but the bottom line is there is no password that I can use to logon except the password phrase. USER=xxxx NAME=xxxxx OWNER=xxxxxx CREATED=13.079 DEFAULT-GROUP=SYS1 PASSDATE=00.000 PASS-INTERVAL= 90 PHRASEDATE=13.079 ATTRIBUTES=OPERATIONS GRPACC ATTRIBUTES=PASSPHRASE z/os 1.12 On Wed, Mar 20, 2013 at 1:26 AM, Ed Jaffe <edja...@phoenixsoftware.com>wrote: > On 3/19/2013 12:07 PM, EXT-Schwarz, Barry wrote: > >> So you're only using them for TSO? I thought you would have to use >>> them for everything if you turned them on? >>> >> A user with a pass phrase must also have a password. When RACF is called >> to validate either, it uses the length of the data to determine which it is >> validating. >> >> Consequently, a user with a pass phrase need not ever use it. The >> password will always work. (I imagine the password authentication exits >> could be used to prohibit using the password.) >> > > No. RACROUTE REQUEST=VERIFY has two mutually-exclusive sets of keywords: > a) PASSWRD= and NEWPASS= and b) PHRASE= and NEWPHRASE=. > > If the issuer of RACROUTE chooses to implement passphrases, then passwords > need not be supported at all. > > -- > Edward E Jaffe > Phoenix Software International, Inc > 831 Parkview Drive North > El Segundo, CA 90245 > http://www.phoenixsoftware.**com/ <http://www.phoenixsoftware.com/> > > ------------------------------**------------------------------**---------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- Keith Smith Engineer-Enterprise Sys Sr.-IT Capacity & Performance Shaw Industries Inc. Subsidiary of Berkshire Hathaway 616 E Walnut Ave Dalton, GA 30721 Email: keith.sm...@shawinc.com Office: 706.275.3244 Please consider the environment before printing. -- ********************************************************** Privileged and/or confidential information may be contained in this message. If you are not the addressee indicated in this message (or are not responsible for delivery of this message to that person) , you may not copy or deliver this message to anyone. In such case, you should destroy this message and notify the sender by reply e-mail. If you or your employer do not consent to Internet e-mail for messages of this kind, please advise the sender. Shaw Industries does not provide or endorse any opinions, conclusions or other information in this message that do not relate to the official business of the company or its subsidiaries. ********************************************************** ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
