Re: AS400 Automatic Sending of New Password?

[Charles Wilt <charles.wilt@xxxxxxxxx>]

John,

You sure about "You could decrypt the password"?

I remember a big todo a number of years back when it was discovered that it
was possible to find and decrypt the Netserver aka windows password stored
on the box.

As I understand it, that still a problem if QPWDLVL is 0.

But otherwise?

Charles

On Wed, Jun 17, 2009 at 1:33 PM, John Earl <johntearl@xxxxxxxxxxxxx> wrote:

> Frank,
>
> You could decrypt the password and send it to the user, but that is
> probably more trouble than it is worth. Instead change the password and the
> profile and send out a single use password that the user can use for access.
>
> There are commercial applications that do this process for you securely and
> take a lot of the risk and guesswork out of the process. There aren't any
> available solely for the i, but if you are using EIM and SSO, you could
> solve this whole problem at the network authentication level.
>
> jte
>
>
>
>
> Sent via BlackBerry from T-Mobile
>
> -----Original Message-----
> From: fbocch2595@xxxxxxx
>
> Date: Wed, 17 Jun 2009 12:41:50
> To: <midrange-l@xxxxxxxxxxxx>
> Subject: AS400 Automatic Sending of New Password?
>
>
>
> Hi Folks, you know when you're trying to sign in or log in?to a web site
> but you forget your password and after a few tries you have to click on the
> "forgot your password" button and you're emailed a new password?? Can that
> be done with the AS400/iSeries??
>
> Any thoughts on how?it could be done with minimal programming? ?
>
> Has anyone out there tried that??
>
> Right now when a user calls the help desk the help desk issues a
> new?password?but we want to eliminate that call (and probably the help desk
> too).?
>
> As always, any help appreciated.?
>
> Thanks, Frank?
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.