Re: MIDRANGE-L Digest V4 #10

Martin,

At was at an office once in this same scenario.  Only the programmers
needed access to green screen 5250 emulation.  Everything else was 
client server.  So how do you get the user to change their password?

The solution we came up with works, but didn't really like it.  We had
the web server running on the AS/400 and it was quick to write a little
RPG program that accepted 3 parameters and returned one.

The 1st parameter was their user name.  The 2nd parameter was their old 
password.  The 3nd parameter was their new password.  It would first make
sure their old password matched by calling an system program (this was RPG
III) that stated if the passwords matched.  Then it would call another
system program to change their password.  The parameter that was returned
was a text string that stated success, old password not found, new password
not long enough, matches one of previous 4 attempts, etc...

We then build a web page to test it out and it worked.

We then build a little Delphi program that called the RPG CGI program directly
and it worked.

The thing I did not like about was the un-encrypted password going over the
network.  But I think we're doing this all the time with our 5250 emulations
anyway.

Regards,

Jim Langston

Date: Thu, 4 Jan 2001 15:28:51 -0000 
From: "McCallion, Martin" <MccalliM@Midas-Kapiti.com>
Subject: How do I allow NetServer-only users to change their AS/400 passwo rds?

Hi all.

We have a number of users here who need access to the AS/400 via
NetServer only; they are not AS/400 programmers, they never need to sign
on to a green screen, but they do need to be able to add and edit files
in the IFS.

We have NetServer running, appropriate shares set up, and User Profiles
set up matching the Windows user names.  However, I can't find any way
to allow such users to change their AS/400 passwords from the PC.  It
would seem like massive overkill to insall Client Access Express on each
machine and show them all how to sign on and change their passwords.

We're on V4R4 and NT4, FWIW.  I've searched the archives, IBM's site and
Usenet fairly comprehensively, and I'm beginning to believe that there
is no solution to this.  But surely IBM couldn't be so dumb...? :-)

Cheers,

Martin.
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---