Re: QSYUPTBL

[Scott.Lindstrom@xxxxxxxxxx]

At least (by default) only QSYSOPR, QPGMR, QSRV, and QSRVBAS are authorized
to this command.  Everyone else is excluded.

Scott Lindstrom
Zenith Electronics


Gene,

> In addition to storing passwords in ciphertext, OS/400 stores
> passwords in plaintext, too.  For example, after User A signs on,
> User B can type the following and see User A's plaintext password
> (provided User A and User B are signed on in the same subsystem):
>
> DMPSYSOBJ  OFFSET(210  1B0  10)  SPACE(0  14)

An interesting twist on sniffing passwords. If a user has access to
DMPSYSOBJ, it sure beats sniffing the IP packets for telnet sessions !




+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---