If a user cannot authenticate through the driver but can log in through eDirectory, ensure that the user is present in the Census and is not marked as being inactive. If the user is not present and active in the Census, review your Census Search object specifications.
You can use the ASCTEST utility to check on the health of z/OS Platform Services functions. For more information about ASCTEST, see Section 11.4, The ASCTEST Command.
z/OS enforces restrictive rules on the character set that can be used for user IDs and passwords. It requires that user IDs not exceed seven characters and that passwords not exceed eight characters. Each must consist of
The letters A-Z
The numerals 0-9
The national characters @ # $
User IDs must not begin with a numeral. Users whose IDs and passwords do not adhere to these rules are not able to use z/OS. Ensure that your IBM TCP/IP implementation for z/OS is at the latest maintenance level.