Re: Password validation API

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

The QSYGETPH and QSYRLSPH API's can do this for you.

The January Security Patrol Column in Midrange Computing has an example CL
program that uses QSYGETPH and QSYRLSPH (it also uses QWTSETP to swap profile,
but you could strip that out).  You can use these to validate a password.  If 
you
don't have a copy of the magazine, the code is already on the web.

jte


fdenoncourt@harcourt.com wrote:

> Is there a way to validate a password for a user profile other than the one
> who is signed on?
> The software package we use has an 'operator' file that stores the password
> as well. I will be removing the passwords from the file and using CHKPWD to
> validate passwords in the instances where a checkpoint is reached that
> requires re-entry of a password. We do want to keep this functionality.
> However, this checkpoint is also used to allow entry of another
> operator/password. The reasoning is that a supervisor could assign a task
> to a user who does not have authority to that particular menu option. The
> supervisor would then enter his own operator/password combination. When the
> user leaves the menu option, the authority is removed.  In this
> instance,the prompt for a password using the CHKPWD command will fail
> because the password is for a user profile other than the person who has
> signed on.
> Thanks
> Fran Denoncourt
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

--
John Earl                    johnearl@400security.com
The PowerTech Group      --> new number --> 253-872-7788
PowerLock Network Security   www.400security.com
--




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---