RE: Using QNTC and passwords -- MIDRANGE-L

midrange-l-request@xxxxxxxxxxxx wrote:

>   1. Using QNTC and passwords (Jerry)
>
>We want to use the QNTC facility to write files directly onto a Win2K file
>server.  The documentation talks about having to get the passwords to match.
>
>That doesn't really work for me because the Win2K box requires mixed case
>passwords greater than 10 chars while the AS400 is using QPWDLVL 0 so I can
>never get the passwords to sync.

AFAIK, if any two platforms hold to two incompatible security 
standards/policies, those platforms won't interoperate. One solution is a 
client, e.g., a Java client that receives sockets data and then writes it out 
locally.


>(The LAN folk aren't interested in allowing an AS400 password and IT is not
>interested in moving to QPWDLVL 1.).

Isn't there a management level authority that can make a decision here?

Note that QPWDLVL=1 is still 10 chars; I assume you mean QPWDLVL=2. However, 
also note that QPWDLVL=2 doesn't _require_ >10 chars nor mixed-/lower-case -- 
it simply enables them. Example added elements could be QMAXPWDLEN=10 and 
QPWDVLDPGM set to verify only upper-case characters.

Something like that could allow a profile to be created on the AS/400 that fit 
Win2K requirements while keeping general users the same.

<alarm bells=*ON>
Remember DST/SST related elements, etc.
<alarm bells=*OFF>


>So...this must be a common issue that has already been addressed.  In FTP I
>specify the userid/pw to whatever I need.  How is this done with QNTC?

For /QNTC, it would most likely be handled by a profile swap to the 
Win2K-enabled profile. Security info is then held in the profile object rather 
than in a text script.


>Additionally, is it the same for QOPENSYS (Unix file systems)?

AFAIK, this has no meaningful bearing on /QOpenSys. /QNTC essentially refers to 
a communications/networking function. /QOpenSys is a "physical" directory in 
the IFS where /QNTC is more of a "virtual" directory file system. /QNTC is 
similar to /QFILESVR.400 and mounted NFS directories though; profiles/passwords 
are relevant in those but not /QOpenSys. (Well, except for normal IFS 
authorities within the system, etc.)


>Ultimately I want do drive the writing of files to the Win2K box from a batch 
>CL
>process so there will be no operator intervention required.

Gonna be tough without cooperation between the administrators and their 
policies. This is management-level unless flexibility is built in.

Mostly IMO.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com


__________________________________________________________________
Introducing the New Netscape Internet Service. 
Only $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need. 

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp