Skip to main content

Recommendations

The Bravura Pass server expects that password update requests that it has approved will not be rejected by the z/OS security product. New password values will have been validated against any installation rules prior to the call to the Bravura Pass server. As a result, if the Mainframe Connector password change exit is used in conjunction with other exits, the following recommendations should be considered:

  • Place the Mainframe Connector exit last in the exit call sequence.

  • Do not invoke the Mainframe Connector exit if a previous exit routine has set a return code that would cause the password update to be rejected (see the Exit driver example).

When multiple exits are linked together, it may be necessary to alter the CSECT names of existing modules. The linkage editor can be used for that purpose. The following example would link an exit driver with CSECT name ICHPWX01 with PWXIT001 , PWXIT002 , and the Mainframe Connector password change exit into a single load module with a name of ICHPWX01 and change the name of the Mainframe Connector password exit to PSNCPWX1 :

       INCLUDE OBJ(XITDRVR)
       INCLUDE OBJ(PWXIT001)
       INCLUDE OBJ(PWXIT002)
       CHANGE  ICHPWX01(PSNCPWX1)
       INCLUDE PSNCOBJ(ICHPWX01)
       ENTRY   ICHPWX01
       SETCODE AC(1)
       NAME    ICHPWX01(R)
In this section: