RE: password security

["Sattler, Phil" <PSattler@xxxxxxxx>]

To create a numeric password, such as, 1212, you create the password as
Q1212. The user would then use 1212 as the password.

Phil Sattler

248-371-8224
Lear Corporation - DaimlerChrysler Division
Rochester Hills, MI


        -----Original Message-----
        From:   Mark A. Manske [SMTP:mmanske@minter-weisman.com]
        Sent:   Wednesday, January 24, 2001 11:39 AM
        To:     MidRange AS/400 (E-mail)
        Subject:        password security

        I got a really good one for you experts out there -
        I have finally convinced everyone here to be more secure -
        we are at V4R4 most recent PTF's and sec level 40

        I have a user that blew my mind, his old password was 1212
        he now changed it (30 days expire) to 121212 -
        not the brightest thing, but at least people are cooperating

        According to the IBM manuals, and even if as QSECOFR the first
        position of a password must be character -

        I use chgpwd, or chgusrprf, and I cannot do this,
        how in the world could a user do this, and yet another attempted
1010tree
        and
        could not change the password -

        1212 user has NO special authorities, does not matter if client
access full
        or express

        anyone got a clue how this could happen???

        TIA

        Mark A. Manske
        [mailto:mmanske@minter-weisman.com]
        Sr. Project Lead
        Minter-Weisman

        +---
        | This is the Midrange System Mailing List!
        | To submit a new message, send your mail to
MIDRANGE-L@midrange.com.
        | To subscribe to this list send email to
MIDRANGE-L-SUB@midrange.com.
        | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
        | Questions should be directed to the list owner/operator:
david@midrange.com
        +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---