Re: Password "Hint" Feasibility

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Peter,

Peter Dow wrote:

> Hi Paul,
>
> How about a generic sign on of HINT, HINT that would call program HINT that
> would ask for their userid and then show the HINT text?

This could be an extraordinarily bad idea.  User Profile HINT would be a member
of *PUBLIC, and would thus be authorized to *CHANGE anything on your box that
*PUBLIC has authority to.  If you're not clear whether this is a problem,
checkout the system calue QCRTAUT and see what authority *PUBLIC has to newly
created objects.

There are better suggestions in this thread.

jte


--
John Earl                    johnearl@400security.com
The PowerTech Group      --> new number --> 253-872-7788
PowerLock Network Security   www.400security.com
--




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---