Re: Given a profile, can I retrieve its password using an API?

[Scott Klement <klemscot@xxxxxxxxxxxx>]

Passwords on secure operating systems are stored using "one-way
encryption."  Meaning that the password can be encrypted -- but not
decrypted.  

I'm pretty sure that this is also the case on the AS/400.   (And I'd
be very disappointed if it is not)

If your goal is to check if a password is valid, the proper method is
to encrypt what the user types, and then check it against the encrypted
version of the password that's stored online.

If checking the password is what you're after, there's an API that will
do all the work for you called "QSYGETPH"...  take a look at that.


On Tue, 8 May 2001, Bruce Jin wrote:

> How do I retrieve the password for a given user ID? Is such thing possible?
> 
> Thanks.
> Bruce
> 

+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---