password security

["Mark A. Manske" <mmanske@xxxxxxxxxxxxxxxxxx>]

I got a really good one for you experts out there -
I have finally convinced everyone here to be more secure -
we are at V4R4 most recent PTF's and sec level 40

I have a user that blew my mind, his old password was 1212
he now changed it (30 days expire) to 121212 -
not the brightest thing, but at least people are cooperating

According to the IBM manuals, and even if as QSECOFR the first
position of a password must be character -

I use chgpwd, or chgusrprf, and I cannot do this,
how in the world could a user do this, and yet another attempted 1010tree
and
could not change the password -

1212 user has NO special authorities, does not matter if client access full
or express

anyone got a clue how this could happen???

TIA

Mark A. Manske
[mailto:mmanske@minter-weisman.com]
Sr. Project Lead
Minter-Weisman

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---