NEWPW parameters not being honored.

Document ID : KB000009427
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Summary:

NEWPW parameters were added to the parmfile but they are not being enforced.

The following example shows a parmfile entry for the NEWPW control option. The options of FA & FN are not enforced even though the system was IPL'd to bring in the new parameters:

NEWPW(FA,FN) 
NEWPW(MIN=06,MINDAYS=02,NR=01,ID,TS,RS)

TSS MODIFY displays the NEWPW option as:

NEWPW(MIN=06,MAX=08,WARN=03,MINDAYS=02,NR=01,ID,TS,RS)

FA & FN are not shown in the TSS MODIFY display yet other parameters not in the parmfile are listed.

Instructions:

Instructions:

The NEWPW control option has the following default parameters:

NEWPW(MIN=04,MAX=008,WARN=03,MINDAYS=01,NR=0,ID,TS,RS)

If any of the above parameters are not included in the parmfile the default will be assigned. Once a value has been given to a parameter that has a default value, if NEWPW is re-specified omitting that parameter, the previous value will be preserved.

  1. Example of NEWPW in parmfile:
    NEWPW(MIN=06,MINDAYS=02,NR=01,ID,TS,RS) 

    TSS MODIFY displays the NEWPW option as: 
    NEWPW(MIN=06,MAX=08,WARN=03,MINDAYS=02,NR=01,ID,TS,RS) 

    Parameters MAX=08 & WARN=03 are displayed as default values because they were never specified. 

  2. Example of NEWPW after re-specifying the below values: 
    NEWPW(MAX=07,MINDAYS=02,NR=01,ID,TS,RS) 

    TSS MODIFY displays the NEWPW option as: 
    NEWPW(MIN=06,MAX=07,WARN=03,MINDAYS=02,NR=01,ID,TS,RS) 

    The MIN=06 parameter was omitted but the value is preserved. MAX=07 was added to the NEWPW replacing the default value that was previously assigned because the MAX= parameter was never specified. WARN=03 is still assigned by default since a value has never been specified. 

  3. Example of NEWPW after re-specifying the below values: 
    NEWPW(FA,FN) 
    NEWPW(MAX=07,MINDAYS=02,NR=01,ID,TS,RS) 

    TSS MODIFY displays the NEWPW option as: 
    NEWPW(MIN=06,MAX=07,WARN=03,MINDAYS=02,NR=01,ID,TS,RS) 

    The FA & FN parameters are not honored and do not display in the TSS MODIFY.

    Note of Caution:
    The NEWPW control option has to be specified on one line.
    If more than one line is used, only the last line will be honored. 

  4. Example of NEWPW after re-specifying another time: 
    NEWPW(MAX=07,MINDAYS=02,NR=01,ID,TS,RS,FA,FN) 

    TSS MODIFY displays the NEWPW option as: 
    NEWPW(MIN=06,MAX=07,WARN=03,MINDAYS=02,NR=01,ID,TS,RS,FA,FN) 

    The FA & FN parameters are now honored and displayed. 


Additional Information:

Further information can be found in the Control Options Guide in SPECIFIC CONTROL OPTIONS, NEWPW.

https://docops.ca.com/topsecret/using/specifying-control-options-to-modify-your-security-environment/newpwrestrict-password-alterations