Maintaining MVS Passwords in an APPC Environment
The passwords associated with RACF® user profiles periodically expire and must be updated by the user. An installation that uses APPC to communicate with TPs running on MVS may want to use APPC to update MVS passwords.
- X'06F3F0F1'
- SIGNON/Change password (SNA name X'06F3F0F1') is an internal implementation of an SNA service transaction program that maintains passwords on APPC/MVS. The program is invoked through an APPC attach. For more information, see What is the SIGNON/Change Password TP?.
- ATBMINO
- The source code for ATBMINO is a sample implementation of SNA program X'30F0F5F2'. The expired password notification TP (SNA name X'30F0F5F2') has not been implemented in APPC/MVS. The sample implementation of this program (ATBMINO) runs on a workstation. A request to attach X'30F0F5F2' indicates expiration of the password for the user ID specified in an FMH-5 passed from the partner LU running APPC/MVS. If an installation chooses to implement a version of this TP on an z/OS system, APPC/MVS will allow the TP to run with an expired password. The source code for ATBMINO is located in SYS1.SAMPLIB(ATBMINOS). The executable code for ATBMINO is located in SYS1.SAMPLIB(ATBMINO).
- COMUPASS
- This is an example of a program that allows APPC users to specify a new MVS password. The source code for the sample implementation of the program is located in SYS1.SAMPLIB(ATBMIPWS). The executable code is located in SYS1.SAMPLIB(COMUPASS).
The ATBMINO and COMUPASS password maintenance TPs comprise examples of how a partner LU can communicate with APPC/MVS to maintain passwords. These examples are shipped with MVS, and may be downloaded to the system running on the partner LU. For instructions on how to download and use these programs, see Using Sample Programs to Maintain User Passwords on a Partner LU.
As an alternative to modifying the sample programs to maintain APPC/MVS passwords, partner systems can use the SIGNON/Change password TP as described in 2.c. This can avoid the rejection of an allocate (attach) request due to an expired user password.