MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » September 2012

Re: Using QSYRUPWD to write a script file



fixed

The password is stored using a one-way encryption.

This thought just came to me. I can imagine there is some mechanism
that would stop it from working, though.

Write a program to get a profile handle. Doesn't a password need to
be supplied to do that? I haven't used the API and can't remember.
If system uses standard short passwords, and password is required to
get the handle, what would happen if a program tried all password
possibilities? Get kicked off with an error that can't be monitored?

John McKee

On Mon, Sep 24, 2012 at 12:36 PM, Jerry C. Adams <midrange@xxxxxxxx> wrote:
Cyndi,

I'm not familiar with the api, but I can pretty much guarantee that the
answer is, "No." IBM simply would not allow the password to be retrieved as
it would break the security rules. I have asked before (here, COMMON, IBM)
about retrieving lost passwords (notably QSECOFR) and the response was
embarrassing (imagine maniacal laughter).

Jerry C. Adams
IBM i Programmer/Analyst
Any event, once it has occurred, can be made to appear inevitable by any
competent historian.
--
A&K Wholesale
Home Office: 615-832-2730
email: midrange@xxxxxxxx

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Cyndi Bradberry
Sent: Monday, September 24, 2012 12:24 PM
To: Midrange Systems Technical Discussion
Subject: Using QSYRUPWD to write a script file

I use multiple script files to automate transfer of data from the iSeries to
a Windows FTP server. In the past, we have used the anonymous user id to
access the windows server. We no longer can due to security concerns.

The preferred method is to use a user id/password that does change, but is
sync'd between iSeries and Windows.

Can I use the QSYRUPWD api to retrieve the password for a specific user
profile and write it out in the script file ?

Thanks,
Cyndi B.
Boise, ID


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.






Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact