Re: change password API

Tim, the AS/400 does not decrypt your password when you
log in.  You type in your password, and the AS/400 encrypts
it, and compares the encrypted value with the saved encrypted
valued of your password.

Say a password of PASSWORD encrypts to 123456789.
That is what is stored for your password, 123456789, not
the text PASSWORD.  Now, when you go to log in it
encrypts what you type in, PASSWORD into 123456789,
it then compares this to the stored encrypted value, since
they are the same, the passwords are the same.

OS/400 never decrypts your password, that is what makes
it a little more secure.  Please explain why this is "garbage".

Regards,

Jim Langston

Tim McCarthy wrote:

>         >  A solution to this would be to encrypt the plain
>         >text passwords before they were sent in the Delphi or other
>         >program and de-crypt them on the AS/400, but anything that
>         >can be decrypted is not that secure.
>         Huh??? Anything that can't be decrypted is garbage!

<SNIP>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---