FW: Password Validation

["Draper, Dale" <dale.draper@xxxxxxxxxxxx>]

There is a functionality on the AS400 to force users to use a digit in their
password, and more, take a look at your system values WRKSYSVAL, scroll down
bit and you will find quite a few options:

        System                                                      
Option  Value       Type     Description                            
        QPWDEXPITV  *SEC     Password expiration interval           
        QPWDLMTAJC  *SEC     Limit adjacent digits in password      
        QPWDLMTCHR  *SEC     Limit characters in password           
        QPWDLMTREP  *SEC     Limit repeating characters in password 
        QPWDMAXLEN  *SEC     Maximum password length                
        QPWDMINLEN  *SEC     Minimum password length                
        QPWDPOSDIF  *SEC     Limit password character positions     
        QPWDRQDDGT  *SEC     Require digit in password              
      QPWDRQDDIF  *SEC     Duplicate password control 
      QPWDVLDPGM  *SEC     Password validation program

                                                                    
As you can see, you can be a real SOB and force people to have very
difficult passwords, never be able to use variations of a theme, use the
same password again, etc.


Dale Draper
Sega Enterprises, Inc. (USA)
Dale.Draper@seu.sega.com
650-632-7555


> -----Original Message-----
> From: Allen, Stuart [SMTP:sallen@fellowes.com]
> Sent: Monday, June 14, 1999 8:06 AM
> To:   'MIDRANGE-L@midrange.com'
> Subject:      Password Validation
> 
> I'm looking to tighten password control on our system, and have made most
> of
> the the recommended changes from the "Tips & Tools for securing your
> AS400"
> book.
> I want to implement a simple password validation program to disallow
> passwords such as "password", the company name, etc.  However i don't know
> where to start!
> Does anyone have any code snippets or reference sources to give me some
> pointers?
> 
> Thanks,
> 
> Stuart
> 
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---