Customization › Implementing Security with SAF › How to Use External Security › Enable Login Using Password Phrases

Enable Login Using Password Phrases

Administrators can configure the CA Spool VTAM login screen to allow users to log in using password phrases (passphrases). Password phrase login is valid only when the CA Spool is configured for external security. To enable password phrase login, set PWPHRASE=YES on the SAFDEF statement in the ESFPARM configuration file. A sample statement follows:

SAFDEF EXT,CLASS=DATASET,PWPHRASE=YES

Valid values for the PWPHRASE parameter are YES or NO (the default).

If you enable password phrases, users can log in to CA Spool using their userid in combination with either a password or a password phrase.

Users complete the following fields on the CA Spool VTAM login screen:

• Userid – Users can enter 1-8 characters.
• Password – Users can enter 1-100 characters.

  If users enter 1-8 characters, CA Spool attempts a password login.

  If users enter 9 or more characters, CA Spool attempts a password phrase login.

• (If Applicable) Group/Node– Users can enter 1-8 characters.

Note: The ESFPARM file may contain a parameter that specifies XEQOPT=12. This specification allows for three separate 8-byte fields for Userid, Password, and Group/Node on the VTAM login screen. This specification is disabled automatically if you enable password phrases.