Re: Display User Password?

["Keith Carpenter" <CarpCon@xxxxxxx>]

Doug,

I agree, cracking the last 3 chars (8-10) is so trivial such that it's not
really relevant.  I only emphasize the lanman (windows98 network) thing so
that others following this know they can shut this whole exposure down
(change QPWDLVL to 1 or 3).


Keith



> > What's being described here is the lanman password..  For windows, a
> > password can be up to 14 chars (two 7 byte chunks).  On the AS400 where
10
> > bytes is the limit, it's 7 and 3.
>
> Very true, and Windows also allows characters which standard AS400
> passwords may not contain.  So it can take longer to crack a lanman
> password usely solely on windows machines.  But this thread is in the
> context of AS400 user passwords, where 8-10 character lanman passwords
> are effectively no harder than 7 character passwords.
>
> Doug