RE: iSeries passwords

["McGivern, Tom" <Tom.McGivern@xxxxxxx>]

The problem is, how do you change your password over the network.  This
exit would require that your password be sent in clear text across the
network, so it could validate the content, if it were already encrypted,
then it doesn't know what the input was.

That's why ops-nav doesn't have it (IMO)..

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Andy
Nolen-Parkhouse
Sent: Tuesday, November 18, 2003 10:43 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: iSeries passwords


Rob,

I agree that you're probably right.  But this exit program is a
user-written program which receives the old and new passwords as clear
parameters and could do what it wants with them, including writing them
to a database. While adding an exit point requires a little more
sophistication to implement than just changing a system value, it
requires the same level of authority (*ALLOBJ and *SECADM) as changing
the QPWDVLDPGM system value.

What am I missing?

Andy


> I bet this:
> 
> The password validation exit program 
> http://publib.boulder.ibm.com/iseries/v5r2/ic2924/info/apis/xsyvlphr.h
> tm
> 
> Rob Berendt




_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



This communication is confidential and may be legally privileged.  If you are 
not the intended recipient, (i) please do not read or disclose to others, (ii) 
please notify the sender by reply mail, and (iii) please delete this 
communication from your system.  Failure to follow this process may be 
unlawful.  Thank you for your cooperation.