EXITS Record-User Password Exits

Record ID	Fields
EXITS	EXPPXIT(null\|module name) PENCRYP(null\|module name) NEWPXIT(null\|module name)

The EXITS VMO record defines self‑contained CMS modules that are user password exits. The exits are loaded during service machine initialization.

EXPPXIT(null|module name): Specifies the name of a user‑written expired password routine that validates expired user passwords. The routine gets control during system entry validation when the password associated with the logonid is expired. If you do not use this exit module, you do not have to change the EXPPXIT operand.
PENCRYP(null|module name): Specifies the name of a user‑written password encryption exit module. The named module gets control during password validation at log on, during a password modification (such as through the CHANGE or INSERT subcommands), or during password revalidation (DirMaint). The PENCRYP exit module lets you implement your own password encryption algorithm. If you do not use this exit module, you do not have to change the PENCRYP operand.
NEWPXIT(null|module name): Specifies the name of a user‑written password exit module. The named module gets control when you supply a new password when you access the system, or when you specify the PASSWORD field through the CHANGE or INSERT subcommands. The NEWPXIT exit module performs password checking and CA ACF2 for VM validation. If you do not use this exit module, you do not have to change the NEWPXIT operand.

Requirements for using user password exits are:

Code Testing. We recommend that you test all user exit code on a second level VM system because an error in a user exit routine can cause service machine abends.
Code Implementation. Perform the following steps to implement a password exit:
- Write the exit (a self‑contained CMS module), assemble it, and put the text deck on a disk accessed during service machine initialization.
- Define the operands of the EXITS field: NEWPXIT(modulename) or PENCRYP(modulename).
IPL the CA ACF2 for VM service machine.

The SHOW ACTIVE subcommand displays the values currently in effect.