• Subject: RE: Modifying CHGPWD
  • From: Walden Leverich <walden@xxxxxxxxxxxxxxx>
  • Date: Mon, 29 Sep 1997 13:20:50 -0400
  • Organization: Tech Software

Just a guess, but... I would say that OS/400 calls the CPP for the CHGPWD 
command directly, thus skipping your new CHGPWD command. Try creating a 
program named QMNCGPWD (V3R1 cpp, your mileage may vary) and place it above 
QSYS in the library list. Of course, if IBM qualifies their call to the 
command or the CPP then this won't help.

Another option is not to use the OS/400 password expiration facilities, but 
rather implement your own, and check for password expiration in the initial 
program. Of course this is not as clean as the native method, but if it 
works....

Finally, if your password validation rules are so complex that you need a 
screen to remind the user how to generate a valid password each time, then 
I would guess that the user has a cheat sheet at his/her desk with the 
current password, and all your great password validation just went out the 
window.

-Walden

-----Original Message-----
From:   Matthias Oertli [SMTP:oertlim@s054.aone.net.au]
Sent:   Monday, September 29, 1997 6:11 PM
To:     midrange-l@midrange.com
Subject:        Re: Modifying CHGPWD

On Tue, 23 Sep 1997 11:36:57 CST, david.gibbs@silvon.com wrote:

>On 24 Sep 97 at 0:07, Matthias Oertli wrote:
>
>> I'd like to duplicate the CHGPWD command into a library
>> above QSYS. The CPP would be a CL in the same library
>> which would put up a screen explaining the rules applied
>> by the 400 to new passwords (set using system values).
>> Once a user presses enter, the CL would transfer control
>> to the original CHGPWD command (using QCMDEXEC).
>
>Seems to me that it would be pretty easy to do... as there are no
>parameters for the CHGPWD command.

I've got no problem with the CL, DDS and the duplicated command,
it all works.
The real problem is this: if a userprofile is set to PWDEXP(*YES),
when that person next logs in the system requests a password change.
On pressing enter the 400 sends CPI2240 (Not allowed to change
password because you don't have authority to CHGPWD command)
Now the library, the CL, the DDS and the Command all are
PUBLIC(*USE) which should be sufficient.
There must be a catch somewhere...
Anyone have an idea?

Thanks,
Matthias




===================END FORWARDED MESSAGE===================

------------------------------------------------------------------------  
------------------------
Matthias Oertli, Sydney, Australia

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: 
david@midrange.com
+---
uucp
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---


This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].