Command Propagation Facility › Recovery and Accountability › System Entry Validation and Password Propagation

System Entry Validation and Password Propagation

When a user is required to update his password as part of system entry validation, CA Top Secret notifies all other CPF connected nodes of that change. If a matching ACID is found on a remote node, CA Top Secret first compares the password of the "remote" ACID with the old password of the "local" ACID to verify that they aren't two different ACIDs with the same ACID name. If the passwords match, the password on the remote node is updated.

For example, USER01 signs on to TSO on Node A. His current password of "remember" has expired and he changes it to "always". Through CPF, that change is sent to Node B, a remote node. When CPF finds a USER01 in the Security File of Node B, it asks "Is the current password remember?".

• If the answer is yes, the password of USER01 on Node B is also updated to "always".
• If the answer is no, CPF assumes that the USER01 on Node B is not the same person as the USER01 on Node A and leaves the Node B password unchanged.

When CPF detects that the passwords do not match, the following message is sent to the CPF spool data set on the remote node:

TSS0422E PASSWORD VERIFICATION FAILED ON REMOTE NODE