Re: Password Validation API

>  From:    Mel Rothman
>  
>  A kludge that might work would be to have a temporary user ID with a known
>  password for the purpose of validating passwords.  Logic would be:
>  
>  Use QSYCHGPW (Change User Password) to change 
> the temporary user's password to the password being validated.
>  
>  Use QSYRUPWD (Retrieve Encrypted Password) twice to retrieve both the 
> temporary user's and the targeted user's encrypted passwords.
>  
>  If the two encrypted passwords match, the password is valid; else, it is
>  invalid.
>  
>  Use QSYCHGPW to change the temporary user's password back 
>  to a known value.
>  
>  If there is a risk that multiple instances of this logic will be hitting 
the
>  temporary user ID concurrently, each instance could create and destroy its 
> own temporary user profile.

I do not have the commands handy but a revised path might be to
1. Copy from dummy profile to the temporary that will be used by this test, 
in which it uses a naming convention possibly based on the job-id
2. Do Mel's steps
3. Delete the temporary profile.

My level of skill is WRKUSRPRF *ALL & go from there

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---