Re: Using QSYRUPWD to write a script file

[John McKee <jmmckee@xxxxxxxxxxxxxx>]

The password is stored using a one-way encryption.

This thought just came to me.  I can imagine there is some mechanism
that would stop it from working, though.

Write a program to get a profile handle.  Doesn't a password need to
be supplied to do that?  I haven't used the API and can't remember.
If system uses standard short passwords, and password is required to
get the handle, what would happen if a program tried all password
possibilities?  Get kicked off with an error that can't be monitored?

John McKee

On Mon, Sep 24, 2012 at 12:36 PM, Jerry C. Adams <midrange@xxxxxxxx> wrote:
> Cyndi,
>
> I'm not familiar with the api, but I can pretty much guarantee that the
> answer is, "No."  IBM simply would not allow the password to be retrieved as
> it would break the security rules.  I have asked before (here, COMMON, IBM)
> about retrieving lost passwords (notably QSECOFR) and the response was
> embarrassing (imagine maniacal laughter).
>
> Jerry C. Adams
> IBM i Programmer/Analyst
> Any event, once it has occurred, can be made to appear inevitable by any
> competent historian.
> --
> A&K Wholesale
> Home Office: 615-832-2730
> email:  midrange@xxxxxxxx
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Cyndi Bradberry
> Sent: Monday, September 24, 2012 12:24 PM
> To: Midrange Systems Technical Discussion
> Subject: Using QSYRUPWD to write a script file
>
> I use multiple script files to automate transfer of data from the iSeries to
> a Windows FTP server. In the past, we have used the anonymous user id to
> access the windows server. We no longer can due to security concerns.
>
> The preferred method is to use a user id/password that does change, but is
> sync'd between iSeries and Windows.
>
> Can I use the QSYRUPWD api to retrieve the password for a specific user
> profile and write it out in the script file ?
>
> Thanks,
> Cyndi B.
> Boise, ID
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
> or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
> moment to review the archives at http://archive.midrange.com/midrange-l.
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.