Re: QNTC failure - CPDB053 - caused by special character? -- MIDRANGE-L

nope, didn't start with Q...

Charles

On Wed, Nov 27, 2013 at 3:03 PM, <rob@xxxxxxxxx> wrote:

By any chance did your password begin with a Q? Because, well, look at
this:

crtusrprf dummy password(Q123456)
and I can sign on with a password of either Q123456 or 123456
chgusrprf dummy password(queen)
and I can only sign on with a password of queen and not ueen.
It kind of came that way to support S/36 users who had 4 character
passwords and were often numeric (like their phone extension).

I've also heard to avoid the dollar sign as that's not an invariant
character.

Iron Mountain recently came up with highly restrictive passwords. They
have to include characters (upper AND lower case), numbers and various
special characters. And be at least a certain number of characters. Bad
enough, and I only use it when I back up our BOFH so it's prone to me
forgetting it, that I put it into a txt file in my PC's startup group. The
laptop's version of a sticky note stuck to the bottom of the keyboard.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

From: Charles Wilt <charles.wilt@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 11/27/2013 02:53 PM
Subject: QNTC failure - CPDB053 - caused by special character?
Sent by: midrange-l-bounces@xxxxxxxxxxxx

I was getting CPDB053 - Error Exchanging Security Information,

Specifically, Error Class 1 Return Code 5 which per the message text means
- Access denied.

In the netlogon.log of the WIn2003 DC, I see:
11/27 13:51:28 [LOGON] domain: SamLogon: Transitive Network logon of
domain\MYUSER from SYSTEMI (via THEPC) Entered
11/27 13:51:28 [LOGON] domain: NlPickDomainWithAccount: domain\MYUSER:
Algorithm entered. UPN:0 Sam:1 Exp:0 Cross: 0 Root:1 DC:0
11/27 13:51:28 [LOGON] domain: SamLogon: Transitive Network logon of
domain\MYUSER from SYSTEMI (via THEPC) Returns 0xC0000064
11/27 13:51:28 [LOGON] domain: SamLogon: Transitive Network logon of
domain\MYUSER from \\SYSTEMI (via THEPC) Entered
11/27 13:51:28 [LOGON] domain: SamLogon: Transitive Network logon of
domain\MYUSER from \\SYSTEMI (via THEPC) Returns 0xC000006A

Which per this page:
http://support.microsoft.com/kb/189541
0xC000006A User logon with Misspelled or bad Password
0xC0000064 User logon with Misspelled or Bad User Account

I also found this IBM doc
http://www-01.ibm.com/support/docview.wss?uid=nas8N1018627

Now, I double and triple checked that my use ID and password matched
between Windows & the i. I could in fact access the IBM i Netserver from a
PC without issue.

running 7.1 with password level 0 (yeah, that' son my to change list)
PC in question is running WinXP.

My password was 6 characters, 2 digits and one special character, a dollar
sign $.

I changed both Win & System i passwords, and removed the $ and QNTC
worked.

I've been unable to find anywhere that lists special characters to stay
away from if you use QNTC...But I expected the simple ones, @#_ to be
fine..

Apparently not. Does anybody know if and where this restriction is
documented?

Thanks!
Charles
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.