RE: CHGDSTPWD function

You must be the *REAL QSECOFR to use CHGDSTPWD.

Al

Al Barsa, Jr.
Barsa Consulting Group, LLC

400>390

914-251-1234
914-251-9406 fax

http://www.barsaconsulting.com
http://www.taatool.com






                      vhamberg@attbi.com
                      Sent by:                  To:       
midrange-l@midrange.com
                      midrange-l-admin@m        cc:
                      idrange.com               Subject:  RE: CHGDSTPWD function


                      07/26/2002 03:03
                      PM
                      Please respond to
                      midrange-l






I believe anyone with *SECOFR authority can use
CHGDSTPWD. And aren't you forced to change it again,
once used? And there's a rotation, where you can't use
the same password so many times. Anyone know the number?

Of course, once in DST, you can set it back to a
previously used one.

Because it is so easy to get the QSECOFR DST profile
disabled in an environment where many folks have access
to it, I find it best to have individual DST profiles.
This may give better audit trails, too, for all the
usual reasons.
> That you used the OS/400 QSECOFR profile to reenable the DST profile was
the
> piece I missed.  Thank you for clarifying.
>
> Donald R. Fisher, III
> Project Manager
> The Roomstore Furniture Company
> (804) 784-7600 extension 2124
> DFisher@roomstoreeast.com
>
> <clip>
> The issue is that I used the OS/400-based QSECOFR password AND the
CHGDSTPWD
> command to reset the password to *default and re-enable it.  I did not
use
> my DST profile to do more than disable the DST QSECOFR profile and
monitor
> for the subsequent changes to it.
> <clip>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.