IBM Mainframe Forum

[mehi1353]

Hi friends,

we have activated password history in our z/OS environment: user cannot re-use their "10" old passwords.
This acts correctly on TSO logon panel.
But with ALTUSER command, special users can change passwords to any old passwords, without any problem! (password history is bypassed!)

Why that happen any what we can do to prevent bypassing "password history"?

Thanks in advance,
Mehrdad

[steve-myers]

Generally speaking, RACF users with the SPECIAL attribute can do as they please, and that includes bypassing password history. This does not extend to all cases. For example, password history is not bypassed when changing their password in the LOGON panel. I do not know what would happen if they attempt to change their password with ALTUSER.