Re: Password Resets
I implemented a web page on VM that uses a corporate single sign on and one-time password server that acts as a proxy. If you come to my password reset page the wrong way, it redirects the browser to the SSO page. Once authenticated that proxy adds some useful headers to the https request. When my page finally gets the request it sees the info added by the proxy and puts up a page listing all userids owned by that person and let’s them provide a new password for one or any/all of them in one shot. It also unlocks various “terminal lockout” conditions. The web server id that handles that uses a Diag A0 subcode 60 (vmsecure) to effect the change. It is also configured to allow the change without the current password. That allows people to reset forgotten passwords or set an initial password for newly created userids. One caveat…. We have a global workforce and sometimes the ascii/ebcdic translation is different than their terminal emulator. That results in setting the password fine for web access things but failing for 3270 emulation things. I haven’t taken the time to sort that out yet. It’s a minor issue. Don On Tue, Aug 16, 2022 at 14:34 Steely.Mark wrote: > Does your site use a Self Help Password Reset Tool for RACF or TSS ? > > We would like the customer to be able to perform this function without > involving the Help Desk. > > Any suggestions ? > > Thank You > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Password Resets
On Tue, 16 Aug 2022 at 17:34, Steely.Mark wrote: Does your site use a Self Help Password Reset Tool for RACF or TSS ? > > We would like the customer to be able to perform this function without > involving the Help Desk. > > Any suggestions ? > /plug My employer Beta Systems Software offers two such products, with all kinds of other optional features. I would suggest when looking for such a tool that you ensure the vendor actually knows a bunch about RACF (and TSS/ACF2) and isn't just remotely issuing ALU (or TSS REPLACE) commands. And yes, we eat our own dogfood and use our own reset tools in production. /eplug No salesman will call (unless you ask). Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Password Resets
OKTA Sent from my iPhone No one said I could type with one thumb > On Aug 16, 2022, at 16:33, Steely.Mark wrote: > > Does your site use a Self Help Password Reset Tool for RACF or TSS ? > > We would like the customer to be able to perform this function without > involving the Help Desk. > > Any suggestions ? > > Thank You > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Password Resets
Does your site use a Self Help Password Reset Tool for RACF or TSS ? We would like the customer to be able to perform this function without involving the Help Desk. Any suggestions ? Thank You -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN