Re: Password Security

As far as I know there is no system value to force this at V5R4 level.

However, at 6.1 level there is a new system value called QPWDRULES, which
allows you to specify many different rules, one of which is :

*MIXCASEn
Where n is a number from 0 to 9. The password must
contain at least n uppercase and n lowercase
letters. This value is rejected if the system is
operating with a QPWDLVL value of 0 or 1 because
passwords are required to be uppercase.

Time to upgrade!




From: John Mathew <johnmathew400@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date: 08/07/2012 09:41 PM
Subject: Re: Password Security
Sent by: midrange-l-bounces@xxxxxxxxxxxx



Iam trying to force mixed case. Tried with QPWDLVL but no results has
found.

Its allowing me to enter lower or upper cases that I dont want.Actually
it has to restrict and force to mixed case.

It sounds like you may be running into the problem where someone may use
"gLuTtOn8" as their password and it seems to cause some confusion when
going to the i. There are some notes from IBM on this. We just tell our
users to use either all lower case or all upper case and that works for
now.


In above case if password entered as gLuTtOn8 but when it comes to Iseries
it reads as GLUTTON8 is it that way.


If so force mixed case is of no use.

Please correct me if Iam wrong.

Jo








________________________________
From: "rob@xxxxxxxxx" <rob@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, 7 August 2012 10:52 PM
Subject: Re: Password Security

Are you trying to force mixed case, or, are you just trying to allow mixed

case? If your goal is to just allow mixed case then use system value
QPWDLVL. However, read up on that! And not just the help text on
WRKSYSVAL for that value.

We have it set at 0. Which, when you type in your password for the i,
regardless of the case you type it in it will appear as all capitals to
the i. So my password in windows may be "glutton8" but it will appear as
"GLUTTON8" to the i.

It sounds like you may be running into the problem where someone may use
"gLuTtOn8" as their password and it seems to cause some confusion when
going to the i. There are some notes from IBM on this. We just tell our
users to use either all lower case or all upper case and that works for
now.

We are using Tivoli Identity Manager to keep all of their passwords in
sync. We have them change it in Windows and that automatically goes out
to each lpar of i they have an account on and changes their password.

Rob Berendt