Re: Changing from password level 0/1 to 2 (QPWDLVL)

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

Do not mess with QPWDLVL 2.  Go straight to 3.  We tried baby stepping and
going to 2.  All that caused was us doing another IPL midweek to get to
level 3.  Since we're normally only allowed to IPL once per quarter this
was not popular.  Level 2 is only useful over level 3 if you're running
extremely ancient versions of Windows.  We have to pass audits so that's
not us.
Knowledge center has it well documented on how to get to higher levels and
what to watch out for.  And, dropping to a lower release is more problem
than just an extra IPL.  That's also documented at
https://www.ibm.com/docs/en/i/7.5?topic=security-planning-password-level-changes
Hey, I just noticed there's a password level 4!  I'll have to check that
out.

On Tue, Mar 21, 2023 at 8:28 PM Don Brown via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> Hi Team,
>
> I have been reading up on this as one client we look after is wanting to
> introduce longer passwords.
>
> After reading, a couple of times I was not sure what issues may arise for
> intersystem connections if one or more are on password level 0/1 and one
> is on password level 2.
>
> For example we connect using telnet mostly secure on port 992 but also
> some on port 23, we also use ftp between a lot of systems, ssh and we have
> PHP accessing with XMLSERVICE
>
> As this requires an IPL to implement it is not a super quick option to
> revert back to the previous level.
>
> Can you share your experience and difficulties in changing QPWDLVL to 2
>
> Thanks
>
> Don
>
>
>
> --
> This email has been scanned for computer viruses. Although MSD has taken
> reasonable precautions to ensure no viruses are present in this email, MSD
> cannot accept responsibility for any loss or damage arising from the use of
> this email or attachments..
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.