Re: How to preserve password change date

Booth,

There is a suite of password APIs that allow you to retrieve the ENCRYPTED
value of a users password and then use that value to set the user's password
at a later date/time. Thus it is now possible to "retrieve" a user's
password. Notice that the original post did not want to see the unencrypted
value, which you cannot do.....maybe.....

My biggest question is this: Does the word "PASSWORD" always resolve to the
same encrypted value? If so, couldn't I retrieve the encrypted password, do
a reverse lookup into a table of plain to encrypted values and retrieve the
clear text password for the encrypted value? It may take me a few weeks of
machine time to build this table of clear to encrypted values, but it could
be worth it.

-Walden
-----Original Message-----
From: boothm@ibm.net <boothm@ibm.net>
To: MIDRANGE-L@midrange.com <MIDRANGE-L@midrange.com>
Date: Monday, November 17, 1997 8:37 AM
Subject: RE: How to preserve password change date


>
>
>Don't even think about trying to change audit values like last password
>
>change date.
>
>Is there another way to reach your goal without mucking in the user
>passwords?  Somewhere recently I saw it written that passwords go into an
>AS/400 encrypted, and there purposely isn't any unencryption method, so,
>on the face of it, it seems to me your original goal is not possible, at
>least not for ordinary men.
>
>----------------------------------------------------
>Booth Martin
>---------------------------------------------------
>
>
>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
>| To unsubscribe from this list send email to MAJORDOMO@midrange.com
>|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
>| Questions should be directed to the list owner/operator:
david@midrange.com
>+---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---