User ID Security Exit Support › Change Password Parameter List

Change Password Parameter List

On entry to the security exit, Register 1 points to a list of ten full words, as shown in this diagram.

The contents of the parameter list are as follows:

• Word 1

  Is a full word containing the address of function code F'20'.

• Word 2

  Is the address of a subfunction code. This code defines the source of the change password request and has values set as follows:

  Subfunction Code	Value
  F'0'	User has requested password change
  F'4'	Change required because password expired
  F'8'	Forced change by UAMS user
  F'12'	&SECCALL CHANGE request issued from an EASINET procedure

• Word 3

  Is the address of an 8-character field, blank-padded, containing the user ID whose password is to be changed.

• Word 4

  Varies according to subfunction code:

  Subfunction Code	Value
  F'0'	Word 4 is the address of two full words. The first contains the correlator and the second the user token (UTOKEN) of the user issuing the change request.
  F'4'	As for subfunction F'0'.
  F'8'	As for subfunction F'0'.
  F'12'	Word 4 is zero.
  F'16'	As for subfunction F'0'.

• Word 5

  The address of 8-character terminal name followed by the 8-character user ID of the user issuing the change request.

• Word 6

  Varies according to subfunction code:

  Subfunction Code	Value
  F'0'	Word 6 contains the address of an 8-character field, blank-padded, which contains the current user ID password.
  F'4'	As for subfunction F'0'.
  F'8'	Word 6 is set to zero.
  F'12'	As for subfunction F'0'.
  F'16'	Web user logon.

• Word 7

  Is the address of an 8-character field containing the new password to be assigned to the user ID.

• Word 8

  The address of an 82-character area into which the exit can place any error message text if the change request is denied or failed. Any text placed in this area is displayed to the user in response to the change request. If an error message is returned in this area it must be formatted as follows:

  • Bytes 00 to 01

    Specifies the hexadecimal length of the message text (excluding these two bytes).

  • Bytes 02 to nn

    Specifies the error message text.

    Limits: 80 characters

• Words 9 to 10

  Are set to zero.

Return Codes from Change Call

The exit must return a completion code in Register 15 on return. The supported completion codes are described below. Specific causes for change rejection are identified by error message text returned in the area addressed by word 8 of the Change Call parameter list.

The return codes listed below are the only codes that are accepted in response to a Change Call. Any other return code is regarded as indicating that the password was not changed.

• 0

  Indicates that the password has been changed.

• 4

  Indicates that subfunction is not supported by exit or other error. A message explaining the cause of error might be placed in the 80-character area addressed by word 8 of the parameter list.

• 8

  Indicates that the password has not been changed. A message explaining the cause of rejection is available in the 80-character area addressed by word 8 of the parameter list.

Notes:

• Your product region does not apply minimum password length checks, nor is automatic password expiry provided. The exit is responsible for all maintenance and knowledge of passwords.
• A user's current password is provided as a parameter for the change call only for subfunctions 0, 4, and 12. That is, when the change request is made by the user after logging on, when the user is required to change the password because it has expired or by EASINET using the &SECCALL CHECK statement.
• For subfunction 8, when a UAMS privileged user requests a forced password change for another user ID it is almost certainly because the current password for that user ID has been forgotten, and is therefore not available for presentation as a parameter for this call.