When a user tries to signon to TSO, the user fails with:
IKJ56421I PASSWORD NOT AUTHORIZED FOR USERID
Check to make sure that the user and TSO facility are not in DORM mode.
To check the user, issue:
TSS LIST(acid) DATA(XAUTH)
and make sure there are no permits on the ACID for MODE(DORM).
To check the TSO facility, issue:
and find the line with:
TSS9553I MODE=mode DOWN=down LOGGING=log options
In DORM mode (with NODORMPW set on the TSO facility), the UADS password is required to signon, not the CA Top Secret password.
If the user is either defined or not defined in UADS and the user has a TSO segment on the CA Top Secret ACID, the CA Top Secret password is required regardless of whether DORMPW or NODORMPW is set on the TSO facility.