RE: password security

[Kurt Goolsbee <K.goolsbee@xxxxxxxxxxxxx>]

Change your password to Q121212.  You only have to enter 121212 for password
validation.  This goes back to the olden days when you had numeric only
terminals out in the shops.  

        -----Original Message-----
        From:   Mark A. Manske [SMTP:mmanske@minter-weisman.com]
        Sent:   Wednesday, January 24, 2001 10:39 AM
        To:     MidRange AS/400 (E-mail)
        Subject:        password security

        I got a really good one for you experts out there -
        I have finally convinced everyone here to be more secure -
        we are at V4R4 most recent PTF's and sec level 40

        I have a user that blew my mind, his old password was 1212
        he now changed it (30 days expire) to 121212 -
        not the brightest thing, but at least people are cooperating

        According to the IBM manuals, and even if as QSECOFR the first
        position of a password must be character -

        I use chgpwd, or chgusrprf, and I cannot do this,
        how in the world could a user do this, and yet another attempted
1010tree
        and
        could not change the password -

        1212 user has NO special authorities, does not matter if client
access full
        or express

        anyone got a clue how this could happen???

        TIA

        Mark A. Manske
        [mailto:mmanske@minter-weisman.com]
        Sr. Project Lead
        Minter-Weisman

        +---
        | This is the Midrange System Mailing List!
        | To submit a new message, send your mail to
MIDRANGE-L@midrange.com.
        | To subscribe to this list send email to
MIDRANGE-L-SUB@midrange.com.
        | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
        | Questions should be directed to the list owner/operator:
david@midrange.com
        +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---