RE: [EXTERNAL] Re: AS400 Object

Thanks for the quick response

We would like to secure the password used to create the AS400 object.
This is what we do
AS400 sys = new AS400(system , genericuser ,password)

Sys.validatesignon(username , userpassword)

Password for the creating the sys object is hardcoded and would like to take it off the code..

Dilip Nair



From: JAVA400-L <java400-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Jim Oberholtzer
Sent: Tuesday, August 20, 2024 10:19 AM
To: Java Programming on and around the IBM i <java400-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: AS400 Object

If the users have IBM i profiles, just use the API to check the user password. See Scott Klements (far more concise and understandable than IBMs version) web site: Validating a user-id and password (scottklement. com) <https: //urldefense. com/v3/__https: //www. scottklement. com/rpg/socktut/valuserid. html__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUCXYbAtq$>
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
ZjQcmQRYFpfptBannerEnd

If the users have IBM i profiles, just use the API to check the user

password.



See Scott Klements (far more concise and understandable than IBMs version)

web site:

Validating a user-id and password (scottklement.com)

<https://urldefense.com/v3/__https://www.scottklement.com/rpg/socktut/valuserid.html__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUCXYbAtq$<https://urldefense.com/v3/__https:/www.scottklement.com/rpg/socktut/valuserid.html__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUCXYbAtq$>>







--

Jim Oberholtzer

Chief Technical Architect

Agile Technology Architects





On Tue, Aug 20, 2024 at 9:14 AM Nair, Dilip <Dilip.Nair@xxxxxxxxxxxxxxx<mailto:Dilip.Nair@xxxxxxxxxxxxxxx>>

wrote:

Hello

We are currently using AS400 object to validate user profiles and invoke

RPG programs from Java.

User and password to create the object is hardcoded in the program.

Looking for ideas on how to secure the password than hardcoding in the

program

Any help is appreciated

Dilip Nair

Please consider the environment before printing this email.

E-mail messages may contain viruses, worms, or other malicious code. By

reading the message and opening any attachments, the recipient accepts full

responsibility for taking protective action against such code. Henry Schein

is not liable for any loss or damage arising from this message.

The information in this email is confidential and may be legally

privileged. It is intended solely for the addressee(s). Access to this

e-mail by anyone else is unauthorized.

--

This is the Java Programming on and around the IBM i (JAVA400-L) mailing

list

To post a message email: JAVA400-L@xxxxxxxxxxxxxxxxxx<mailto:JAVA400-L@xxxxxxxxxxxxxxxxxx>

To subscribe, unsubscribe, or change list options,

visit: https://urldefense.com/v3/__https://lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$<https://urldefense.com/v3/__https:/lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$>

or email: JAVA400-L-request@xxxxxxxxxxxxxxxxxx<mailto:JAVA400-L-request@xxxxxxxxxxxxxxxxxx>

Before posting, please take a moment to review the archives

at https://urldefense.com/v3/__https://archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$<https://urldefense.com/v3/__https:/archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$>.

--

This is the Java Programming on and around the IBM i (JAVA400-L) mailing list

To post a message email: JAVA400-L@xxxxxxxxxxxxxxxxxx<mailto:JAVA400-L@xxxxxxxxxxxxxxxxxx>

To subscribe, unsubscribe, or change list options,

visit: https://urldefense.com/v3/__https://lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$<https://urldefense.com/v3/__https:/lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$>

or email: JAVA400-L-request@xxxxxxxxxxxxxxxxxx<mailto:JAVA400-L-request@xxxxxxxxxxxxxxxxxx>

Before posting, please take a moment to review the archives

at https://urldefense.com/v3/__https://archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$<https://urldefense.com/v3/__https:/archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$>.

Please consider the environment before printing this email.

E-mail messages may contain viruses, worms, or other malicious code. By reading the message and opening any attachments, the recipient accepts full responsibility for taking protective action against such code. Henry Schein is not liable for any loss or damage arising from this message.

The information in this email is confidential and may be legally privileged. It is intended solely for the addressee(s). Access to this e-mail by anyone else is unauthorized.