Re: Fw: Rewarding challenge AS/400...

Every user name on my system that starts with a Q, with the exception of
QSECOFR has a password of *NONE and is *DISABLED.  There were
certain cases where the system wouldn't let me do both (don't remember
why) in which case they were only *DISABLED.

QSECOFR has a secure password that is not a word, so can't be hacked
through a reverse dictionary.

We have no account "IBM".

I go though my user list every 2 months or, I print out an activity report,
basically when the password was last changed (system requirement of 30
day password changing).  If a password has not been changed for 31 days,
then the account is immediately disabled.

The one thing I can't really stop, though, is someone purposely keeping a
user account alive.  That is, they knew someone's password before they
left, and log in now and then just to make sure it remains active.  That is
why the list is compared against active employees occasionally.  (Okay,
make that once).

Although, two accounts were found that were found that were second
accounts for 2 people.  It was discussed the need for it (the previous
manager had set it up that way) and analyzed, and determined in one
case that it was a legit need, and the account was described as such.

In the second case, the second account was deleted.

Regards,

Jim Langston

John Earl wrote:

> This FAQ is posted at least monthly....   it's certainly a wake up call to 
>anyone who
> thinks  that QSECOFR pwd=QSECOFR is not a problem.   :)
>
> jte
>
> Dennis D Pearson wrote:
>
> > Chuck
> >
> > I did a quick look into the alt.2600 newsgroup and found the
> > following reference to userids and password in the FAQ posting.
> >
> > Dennis Pearson
> > -----------------------------------------------------------
> > AS/400
> > ~~~~~~
> > qsecofr         qsecofr         /* master security officer */
> > qsysopr         qsysopr         /* system operator         */
> > qpgmr           qpgmr           /* default programmer      */
> >
> > also
> >
> > ibm             password
> > ibm             2222
> > ibm             service
> > qsecofr         1111111
> > qsecofr         2222222
> > qserv           qserv
> > qsvr            qsvr
> > secofr          secofr
> > qsrv            ibmce1
> >
> > Chuck Lewis wrote:
> > >
> > > Should we reply with something that delivers the "poster" a "payload" - 
>ooops,
> > > never mind, that's not kosher...
> > >
> > > Which newsgroup ?
> > >
> > > Bob Dobrowolski wrote:
> > >
> > > > Found this on a hacker's newsgroup.  They're trying........
> > > >
> > > > Bob Dobrowolski
> > > > Nordic Information Systems, Inc.
> > > > (916)932-2041  Fax:(916)932-2121
> > > > bdobrowolski@nisusa.com
> > > > web site: www.nisusa.com
> > > >
> > > > >
> > > > >
> > > > >rj <rjs69@yahoo.com> wrote in message
> > > > ><7rjgag$a19$1@birch.prod.itd.earthlink.net>...
> > > > >>
> > > > >>
> > > > >> I am looking for someone to crack a password generator for an AS400
> > > > >program.
> > > > >> It was written in C++ and embedded into the AS400 with RPG. The 
>person
> > > > who
> > > > >> cracks this will be handsomely rewarded. Contact me for further 
>details.
> > > > >> Please, only the serious and capable need reply.
> > > > >> No B.S.ers or wanna-be's, plz.
> > > > >>
> > > > >>
> > > > >> TIA..
> > > > >>
> > > > >> rj
> > > > >> rjs69@nospamyahoo.com
> > > > >> remove the nospam
> > > > >>
> > > > >>
> > > > >>
> > > > >>
> > > > >>
> > > > >>
> > > > >
> > > >
> > > > +---
> > > > | This is the Midrange System Mailing List!
> > > > | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> > > > | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> > > > | To unsubscribe from this list send email to 
>MIDRANGE-L-UNSUB@midrange.com.
> > > > | Questions should be directed to the list owner/operator: 
>david@midrange.com
> > > > +---
> > >
> > > +---
> > > | This is the Midrange System Mailing List!
> > > | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> > > | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> > > | To unsubscribe from this list send email to 
>MIDRANGE-L-UNSUB@midrange.com.
> > > | Questions should be directed to the list owner/operator: 
>david@midrange.com
> > > +---
> >
> >   ------------------------------------------------------------
> >
> >   Dennis D Pearson <ddp@coral.com>
> >   Coral Chemical Company
> >
> >   Dennis D Pearson
> >   Coral Chemical Company                     <ddp@coral.com>
> >   135 LeBaron Street ;Waukegan;IL;60085;USA  Fax: 847.336.0924
> >                                              Work: 847.336.8100 #4712
> >                                              Netscape Conference Address
> >   Director of Information Systems
> >   Additional Information:
> >   Last Name     Pearson
> >   First Name    Dennis
> >   Version       2.1
>
> --
> John Earl                                           
>johnearl@powertechgroup.com
> The PowerTech Group                        206-575-0711
> PowerLock Network Security              www.400security.com
> The 400 School                                www.400school.com
> --
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---