Re: Managing Password expiration

[Al Mac <macwheel99@xxxxxxxxxxx>]

Security Officer access can be used to identify what passwords have 
expired, but you need to go one step further.  From WRKSYSVAL rules on 
passwords (how many days until expire under what conditions) and info 
security officer data on the basis of that calculation (date of LAST 
password change by user), compute those user-ids that have only a few days 
until they expire, and send them a communication reminding them of
* relevant rules about changing passwords
* the fact that theirs expires how soon
* process(es) they may follow to get their password changed before it is 
too late

Follow this up with message to you, who all is in harms way & has not acted.

> Al, Rob,
>
> Thanks for the info.
>
> It is sort of a Catch-22 situation. When a user calls the
> PC program (made with ASNA's VRPG), it requests USER and
> PWD and logs to the iSeries with that User ID. BUT, if the
> User ID has expired, the iSeries rejects the logging
> attempt, until the user changes his/her password. It would
> be nice to have a "pre-log" who could allow the program to
> identify the situation and update the password beforehand.
>
> We already use the QSYCHGPW API so the user can change the
> password by himself (or herself... Not being a native
> English speaker all this PC way of writing sometimes drive
> me nuts. Maybe I'll just use "it" when talking about a user
> :-) )
>
> Sigh?I think that *maybe* I'll manage the password
> expiration process myself?
>
>
> Thanks again for your help,
>
> Luis Rodriguez
>
> ----------------------------------------------------------------------
> >
> > message: 1
> > date: Mon, 23 Oct 2006 12:02:52 -0500
> > from: Al Mac <macwheel99@xxxxxxxxxxx>
> > subject: Re: Managing Password expiration
> >
> > Suppose I am in a dumb terminal environment and my
> > password has expired.  I
> > go through the process associated with sign on, using my
> > old password.  A
> > screen or message pops up informing me that my password
> > has expired, and
> > offering me the opportunity to change it.  The system
> > recognizes me at the
> > old password, but also recognizes that my password has
> > expired, and will
> > not let the full sign on process complete until I have
> > changed it.  This is
> > not being done at the level of software controlled by
> > employees of the
> > customers of IBM.
>
> <---->
> > ------------------------------
> >
> > message: 2
> > date: Mon, 23 Oct 2006 13:30:00 -0400
> > from: rob@xxxxxxxxx
> > subject: Re: Managing Password expiration
> >
> > iNav has a feature that you can right click on a
> > connection, Connection to
> > Server, Change Password.
> > Would be nice to know the exact program they call to give
> > you this nice
> > prompt.  Try asking IBM?
> >
> > If you want to roll your own, here's a place to start:
> >
> http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/apis/QSYCHGPW.htm
> >
> > Rob Berendt
> > --
> > Group Dekko Services, LLC
> > Dept 01.073
> > PO Box 2000
> > Dock 108
> > 6928N 400E
> > Kendallville, IN 46755
> > http://www.dekko.com
> >
> >
> >
> > Luis Rodriguez <luis.rodriguez2@xxxxxxxxx>
> > Sent by: midrange-l-bounces@xxxxxxxxxxxx
> > 10/22/2006 11:49 PM
> > Please respond to
> > Midrange Systems Technical Discussion
> > <midrange-l@xxxxxxxxxxxx>
> >
> >
> > To
> > Midrange-L <midrange-l@xxxxxxxxxxxx>
> > cc
> >
> > Subject
> > Managing Password expiration
> >
> >
> >
> >
> >
> >
> > Hi list,
> >
> > Suppose I am in a Client/Server environment AND my
> > password
> > expires, how can a (PC) program ask OS/400 to change the
> > password without signing on first? Somehow, Client Access
> > is able to do this.
> >
> > The company I am currently working for uses VARPG for
> > their
> > C/S apps, and would like to be able to use OS/400's
> > password expiration features (opposed to programming
> > their
> > own?).
> >
> > Thanks for your help,
> >
> > Luis Rodriguez
> >
> >
> > IBM Certified Systems Expert
> > eServer i5 iSeries Technical Solutions
> >
>
> Luis Rodriguez
>
> IBM Certified Systems Expert
> eServer i5 iSeries Technical Solutions
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.