Re: V5R1 DST passwords

IBM clearly panicked here (possibly because of the recent password
flaws and other security exposures). Making it more complicated to
manage is not the right way of tightening security; on the contrary,
you force people to take countermeasures (such as writing the
current password on a sticker attached to the console)
.

----- Original Message -----
From: <barsa@barsaconsulting.com>
To: <MIDRANGE-L@midrange.com>
Sent: Sunday, July 08, 2001 9:36 AM
Subject: RE: V5R1 DST passwords


>
> To make matters worse, you password has to be different from the last 4
> passwords.
>
> Al
>
> Al Barsa, Jr.
> Barsa Consulting Group, LLC
>
> 400>390
>
> 914-251-1234
> 914-251-9406 fax
>
> http://www.barsaconsulting.com
> http://www.taatool.com
>
>
>
>
>
>
>                     "Hall, Philip"
>                     <phall@spss.com>           To:
"'MIDRANGE-L@midrange.com'" <MIDRANGE-L@midrange.com>
>                     Sent by:                   cc:
>                     owner-midrange-l@mi        Subject:     RE: V5R1 DST
passwords
>                     drange.com
>
>
>                     07/07/01 11:49 PM
>                     Please respond to
>                     MIDRANGE-L
>
>
>
>
>
>
> > They've added the CHGDSTPWD command to reset DST QSECOFR to
> > QSECOFR. Now
> > here's the kicker - the password for DST is case sensitive
> > (as I forgot
> > today, typing in qsecofr time and time again when only
> > QSECOFR will work).
> >  You then need to change the password, but it seems that this
> > follows its
> > own rules - even if QPWDRQDDIF is set to 0, you can't
> > duplicate an old
> > password for the DST profile.
> >
> > So pretty easily, DST password management can become an issue
> > - especially
> > since you may not be going into SST that often.
>
> If I remember correctly, the passwords also auto expire after 180 days, to
> give you even more of a potential headache...
>
> --phil
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>
>
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---