Re: MFA, Re: Are there any V7R6 "Gotchas" that I would need to worry about?

Hi Rob

I think you are spot on about the SBMJOB thing vis a vis MFA and password.

But I was curious about the SBMJOB thing and found info (perhaps somewhat off-topic!) about a new function usage - QIBM_RUN_UNDER_USER_NO_AUTH - Simon Hutchinson speaks of this in his site - https://www.rpgpgm.com/2025/08/prevent-my-user-profile-being-used-whenhtml - and this describes its use -

In/IBM i/7.6 a new function usage,QIBM_RUN_UNDER_USER_NO_AUTH, was created to deny anyone from using a given user profile in this way. Its default is to allow an user profile to submit a job for another, if it has at least use authority to the second user profile.

*Regards*

*Vern Hamberg*

IBM Champion 2025 <cid:part1.na0Ar3wY.kTgb0TgZ@centurylink.net> CAAC (COMMON Americas Advisory Council) IBM Influencer 2023


On 6/26/2026 2:35 PM, Rob Berendt wrote:

As far as SBMJOB goes, I don't recall ever having to supply a password on
SBMJOB so I fail to see why I'd have to supply an authentication code.

On Fri, Jun 26, 2026 at 3:33 PM Rob Berendt<robertowenberendt@xxxxxxxxx>
wrote:

James,
Do you use any MFA which requires you to enter the six digit code? Like
having a DUO or Authenticator app on your phone? Why yes, we did have to
get the tinfoil hat guy here to get a smart phone instead of a flip phone.
Yes he keeps it in a Faraday bag when he's not using it. It also supports
those key fob devices too. It's important you have your time sync set up
right.
You can expect the same type of experience.
Signon screen changes to add the new authentication.
Many IBM GUI apps change to support the new authentication.
IBM even discusses how to append the code on to your password (ie
mypassw0rd:######) for applications like FileZilla which do not have an
authentication prompt.

On Fri, Jun 26, 2026 at 3:07 PM James H. H. Lampert via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Given that V7R6 adds MFA support, it's only a matter of time before one
of our customers actually wants to use it.

Two questions:

1) Is there anybody here who has enough experience with this new MFA
support to describe the user experience?

2) Does MFA have any effect on SBMJOB with a USER() parameter?

--
JHHL
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email:MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:https://lists.midrange.com/mailman/listinfo/midrange-l
or email:MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
athttps://archive.midrange.com/midrange-l.

Please contactsupport@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.