KDCUSER - Change user properties

With KDCUSER you can:

• disable or release user IDs for the application

• define, change or delete passwords for user IDs.

Effect in UTM cluster applications

In UTM cluster applications, KDCUSER applies globally to the cluster.

Period of validity of the change

Changes remain valid beyond the end of the application.

---

KDCUSER     USER={ username | (username_1,username_2,...,username_10) }

           [ ,PASS=password ]

           [ ,STATUS={ ON| OFF } ]

---

For administration using message queuing you must enter KDCUSERA.

USER=(user1,user2,...)
		Names of the user IDs to be administered. You can enter a maximum of 10 names per call. If you only enter one name you do not need to key in the parentheses.
PASS=password
		Issue, change or delete password for the user ID. The password can be up to 16 characters in length. If the specified password is shorter than 16 characters openUTM fills the balance with blanks. You can enter the password as a hexadecimal string (32 half bytes) in the form X'.....' or as a character string C'....'. Example:  Hexadecimal string: X'F1F2F3F4F5F6F7F8F9F0'  Character string: 'ABCDEFGHIJKLMNOP' You delete a password by entering PASS=C' ' (blank). If you enter 16 binary zero characters (X'00000000000000000000000000000000') you will not change the password. You can only delete the password if the minimum length defined for the password when the user ID is entered is 0 no complexity level is defined for the user ID (NONE). If a password with a restricted period of validity is generated for a user ID, you cannot enter the old password as the new password when changing the password.  If the application has been generated with SIGNON GRACE=NO, the generated period of validity from the time of the change also applies to the new password.  If a password with a restricted period of validity is deleted, no period of validity applies. If a new password is issued after this, the period of validity is restored.
STATUS=
	ON	Releases the user ID
	OFF	Disables the user ID. This lock takes effect when the user next attempts to sign on. This function does not work for the administrator.

Output from KDCUSER

The old and the new status of the administered user IDs are displayed at the administrator terminal along with an indication of the password having been changed, where applicable.

USER          STATUS
           NEW      OLD
user1     ON|OFF   ON|OFF         PASSWORD CHANGED