The virtual machine issuing the DIAGNOSE code X’A0’ subcode X’60’ must be authorized to do so. Add a SYSTEM override rule using the VMSECURE RULES SYSTEM command as follow:
ACCEPT userid PASSCHNG
Where, userid names the virtual machine issuing this diagnose instruction.
If the issuer is allowed to set a new password without specifying the old value of the password, then the NOPASS option is specified on the rule definition, as follows:
ACCEPT userid PASSCHNG ( NOPASS
You may optionally use the VALIDATE rule to further control the use of Diagnose X'A0' subcode X'60', when password validation is required. This can allow you, for instance, to disallow a requester to use this subcode against a particular set of users.
Note: For more information, see VALIDATE Rule.
|
Copyright © 2014 CA.
All rights reserved.
|
|