Re: SYSTOOLS.GENERATE_SPREADSHEET – MSGSY0271

Hello Scott,

Am 07.11.2024 um 22:37 schrieb Scott Ingvaldson via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>:

To go back to my original question: Why does the profile HAVE to have a password if the password does not need to be known or entered?

I think only IBM can answer that without guesswork.

I feel like this is opening a huge security hole that we had purposely closed.

Huge? Why that?

Give it a completely random password with maximum chars — you're using PWLVL 2, do you? — and document that this is an exception to your Kerberos rule. Done.

Kerberos isn't some magic being any less or more secure than local passwords. If you're using weak passwords, that's your problem Kerberos wont solve.

I admit, it's not as clean as it could be if IBM had tested and handled this edge case in code, but you search for a solution, do you?

:wq! PoC