Re: Retrieve System i user's password?

Won't this request violate password rule #1 - at least one upper case
character?


Steven Morrison
Fidelity Express




"Steve Landess" <sjl_abc@xxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/06/2007 12:43 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
cc

Subject
Re: Retrieve System i user's password?






Rob -

They are trying to solve a problem that will go away after the next
password
change cycle (< 90 days). We just implemented long password support on
the
iSeries systems, and during the interim period they want this solution in
the event someone needs to reset their password.

My recommendation is to wait 90 days and the problem will fix itself...

We currently have password rules in place that will require:

1) At least 1 upper-case character
2) At least 1 special character
3) No repeating characters
4) No characters can be repeated in the same position as the previous
password.

Regards,
Steve

----- Original Message -----
From: <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Monday, August 06, 2007 12:25 PM
Subject: Re: Retrieve System i user's password?

"Nothing is impossible, given enough time and money."

Steve, there are packages out there that will tell you all the user
profiles that are set to their default passwords, are using "simple"
passwords, etc. Granted this can often be done by profile handle APIs

or

some such thing and brute force. Better minds than mine have probably
figured out a hack for this.

Tell you what, contact IBM contract services, tell them what you want

and

have them shoot you a quote. Make sure you have your specs right. Like,
omit IBM supplied profiles, don't change certain ones we have for DDM
security (if you so choose), don't change users whose password is *NONE

-

that sort of rot.
http://www-935.ibm.com/services/us/index.wss/offering/gbs/a1002462

My first question is "What problem are they trying to solve?" Or, why

do

they want lower case? Are they trying to sync their i5 profiles with
Windows profiles? If so, then perhaps instead of this project they need
to be looking at SSO or EIM.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Steve Landess" <sjl_abc@xxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/06/2007 01:07 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
<midrange-l@xxxxxxxxxxxx>
cc

Fax to

Subject
Retrieve System i user's password?






All -

Correct me if I am wrong, but it is my understanding that you _cannot_
retrieve the password for an AS/400 - iSeries - System i user profile.

My

client's security department wants us to change our password "reset"
program to retrieve the user's password if they indicate *SAME, and

change

it to lower case. As far as I know, this is not possible...

Regards,
Steve
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.