🚀 go-pugleaf

In addition to the publications listed by John Pershing, there is a
TNL (Technical NewsLetter, that is, a partial update) to the Peer
Protocols document. The TNL is orderable from IBM as order number
SN61-0102.

This TNL describes all the security facilities on APPC in one place as
an extension to the introductory chapter. The next time we publish the
entire book, there will be a security chapter.

The SIGN-ON/CHANGE PASSWORD transaction program is a new feature of
LU 6.2 and, so far, is only implemented by the very latest version
of CICS/ESA with an SPE (Small Programming Enhancement) that became
available within the last two months. The documentation for that
SPE includes source code, in C, for the requestor function. I do not
know about the availability of machine readable source.

In short, this function allows the requestor to validate his or her
password without having to invoke an application transaction program.
If your password is expired or close to expiring, you get specific
data to that effect. You can then use the same transaction program
to change your password. In this case, the userid and password flow as
data, they do not flow in the FMH-5 ATTACH header. The reason is that,
in the general case (when the userid and password flow in the FMH-5),
if the password is expired, the transaction program does not run. So we
ran into the case where you could not change your password once it
expired, so we put that function in the data.

So, the desired function is defined and published. If your implementation
of LU 6.2 (IBM or non-IBM) does not implement the function, you can
go to your vendor for the particular product and ask them to implement
that architected function.

Reid Sayre