My user gets message ACF01011 logging on to CICS. I don't see the message in the joblog. Does ACF2 record this somewhere?

Document ID : KB000045213
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

My user gets message ACF01011 logging on to CICS.  I don't see the message in the joblog.  Does ACF2 record this somewhere?

ACF01011 LOGONID lid SUSPENDED

 

 

Answer:

ACF2 cuts an SMF record for logon failures that will show up in the ACFRPTPW report.

                      ACFRPTPW Sample Output C

CA ACF2 SECURITY - ACFRPTPW - INVALID PASSWORD/AUTHORITY LOG - PAGE 1

DATE 07/26/98 (98.308) TIME 23.13 LINECNT(58)

DATE          TIME       LID   JNAME    SUBMIT’R SOURCE PROGRAM RC L CPU   AUTH SECLABEL DEFAULTED 

98.308 07/26 15.57 PAOLA TSGXX1 TSGCICS   T757    TSG358     11   SYSB NO

 

RC FIELD DESCRIPTIONS

11 LOGONID SUSPENDED