Re: BugTraq Exploit for OS/400

I run Analyze Default Passwords (ANZDFTPWD), a part of OS/400 Security Tools
every other month or so.  This is a part of AS/400, not sure if Security
Tools is still an add on or included.

I will also list user profiles and look at the date last signed on, and if
it's over a month see if we need to delete the account.

My goal being: Only user profiles that are actually required being in the
system and user profiles not having default passwords.

I do not like the limit of 10 character passwords, and really wish it was
more like 32 characters, but not much I can do about that.

Regards,

Jim Langston

And what would be the workaround(s)?

...I know that many of the software products, like
Pentasafe, and maybe PowerTools, have options in there to list users who's
passwords match their user profiles...

Rob Berendt