Re: Display User Password?

["Mark S. Waterbury" <mark.s.waterbury@xxxxxxx>]

OS/400 has, for as long as I can remember, always used one-way encryption,
and so stores only the encrypted form, never unencrypted passwords. This is
also true for how the 32 prior passwords are stored, if you use that feature
of OS/400 that won't let you re-use any of the previous (up to 32) passwords
you already used. (DSPSYSVAL QPWDRQDDIF). The only known attacks on one-way
encryption schemes are so-called "dictionary" based attacks, where you quite
literally try every word in the dictionary.

----- Original Message -----
> From: <rob@xxxxxxxxx>
> To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
> Sent: Tuesday, September 28, 2004 9:42 AM
> Subject: Re: Display User Password?
>

> Can be done.  Don't know how.  However if you GO SECTOOLS I believe there
> is a tool there to guess if users have easy to guess passwords.  If not,
> freebies are available from NETIQ, and others, to entice you to look at
> their security products.  I don't believe they come right out and say what
> those passwords are.  But if they can figure it out...
>
> Rob Berendt
> --
> Group Dekko Services, LLC
> Dept 01.073
> PO Box 2000
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> CZE Midrange <CZEMidrange@xxxxxxxxxx>
> Sent by: midrange-l-bounces@xxxxxxxxxxxx
> 09/28/2004 10:23 AM
> Please respond to
> Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
>
>
> To
> midrange-l@xxxxxxxxxxxx
> cc
>
> Fax to
>
> Subject
> Display User Password?
>
>
>
>
>
>
>
>
>
>
>
> Once upon a time...
>
> a long time ago...
>
> in a galaxy far, far away..
>
> existed the dinosaur known as system 38...
>
> with a command to display all the passwords for all the system user
> profiles. I cannot find anything looking like this now on my release 5.3
> box...does anyone know of a way to display passwords in our current world?
>
> Thanks much.
>
>  Rick Rayburn
> NYC
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>