RE: Checking the validity of AS400 login details

You took the time to write the code... why don't you run it to find out :-)


-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-bounces@xxxxxxxxxxxx]
On Behalf Of Walden H. Leverich
Sent: 27 August 2009 18:01
To: Java Programming on and around the iSeries / AS400
Subject: RE: Checking the validity of AS400 login details

That's right. Doing it remotely I only need the
AS400 address to make an AS400 object to validate user:

Interesting.... so what would happen if you coded this?

AS400 as400 = new AS400();

try {
as400.setSystemName("as400-ip");
for(int =0; i<100; i++)
boolean ok = as400.validateSignon('QSECOFR', 'WRONGPASSWORD');
}
catch (Exception exc) {
errors = exc.getMessage();
}


Seems like a DOS attack to me. I can disable any user profile on the
system I want to. :-) Granted you could just go to a signon screen and
type in the same thing, but this seems "easier" to do.

-Walden