We have 15 lpars of IBM i. All running at QPWDLVL=3. 1&2 are a waste of time and should be avoided.
ftp, etc work great. Granted, they are all at the same level but, why wouldn't you?
We use IBM's ISIM to sync passwords between Windows and any lpar of IBM i that user is authorized to.
After the change we had the users change their passwords in Windows to ensure that the case and all got synced correctly. Smooth sailing.
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of midrange
Sent: Thursday, March 28, 2019 8:47 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: Changing password minimum length, sign on display
Depending upon the other products (IBM and non-IBM) there can be issues (we have a system still running IBM Content Manager - and it's client only supports 10 character pwd, the change not possible for us.
Any connectivity - Netserver, ftp, odbc, jdbc - everything authenticating (I'm not aware of any exceptions).
So I will ask an additional question - what about between partitions if all not at same pwd level, or between different IBM i servers at different levels - for sndnetf, pass-thru, savrst commands, etc.
It's also not a simple "undo".
Plan well.
Jim Franz
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxxxxxxxx] On Behalf Of DrFranken
Sent: Thursday, March 28, 2019 3:59 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Changing password minimum length, sign on display
Unless you have a custom sign on screen when you change the system value QPDWLVL the system will use a longer field on it's own. That change requires an IPL.
If you DO have a custom sign on screen you must visit that and be certain it has space on the screen for the new 128 character password or you will not be able to sign on as the field will automatically be hidden due to overlap.
This is just one of the reasons I strongly recommend AGAINST a custom signon screen for the controlling subsystem!!
- Larry "DrFranken" Bolhuis
www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.
On 3/28/2019 3:41 PM, Bob Schwartz wrote:
I've been asked to allow for longer passwords/mixed case on our IBM i
server.
Minimum length of 10 characters, but allow for passwords longer than
10
characters.
We're at V7R3 latest cumulative PTF.
What do I need to do with the sign on screen to allow for more than 10
character passwords?
Just change the display file password field attributes?
Should I be looking the system value QPWDLVL also?
Other *SEC system values?
Thank you in advance for your assistance.
Bob Schwartz
Director of Technology Services
Glynn County Schools
1313 Egmont St.
Brunswick, GA 31520
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com
midrange.com
