An ACID created over a year ago never became inactive and was able to sign on. Why?

Document ID : KB000053977
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

An acid created with PASS(xxxxxx,,EXP) is able to sign on for the first time over a year after being created. INACTIVE(30) is set in the parmfile.

Answer:

It doesn't matter in this scenario what the INACTIVE parameter is set to. The counter does not start until the acid signs on and becomes active and the password expires. After signing on and changing the password, the acid would then have to be inactive for 30 days after the password has expired. At this point access will be denied and the acid will become suspended.
Also note that an acid does not become suspended until a sign on is attempted. There must be a check against the acid to determine that it has been inactive for too long.