RE: Password Check Routine

["Jim Langston" <jlangston@xxxxxxxxxxx>]

Myself, I use the Change User Password QSYCHGPW for this.  It's just easier for
me to use.  I just attempt to set the new password to the current password and
look at the error code.  If the password is the existing password, no error is
returned, and nothing is really done, since the password is changed to itself.

If the password supplied doesn't match, then the error code will indicate this.
Seems to be the most straight forward of the security APIs for checking a user
password to me.

Unfortunately, I don't have a code snippet since it was at another company where
this was used.

 Change User Password (QSYCHGPW) API

   1 User ID                                  Input  Char(10)
   2 Current password                         Input  Char(10)
   3 New password                             Input  Char(10)
   4 Error code                               I/O    Char(*)

Regards,

Jim Langston
Programmer/Analyst
Cels Enterprises, Inc.

-----Original Message-----
From: rpg400-l-admin@midrange.com [mailto:rpg400-l-admin@midrange.com]On
Behalf Of Carsten Flensburg
Sent: Thursday, August 23, 2001 1:20 AM
To: rpg400-l@midrange.com
Subject: Re: Password Check Routine


Hello Tim,

Check out the QSYGETPH (Get Profile Handle) API - it'll do what you want...

Best regards,
Carsten Flensburg

----- Original Message -----
From: <rpg400-l-admin@midrange.com>
To: <rpg400-l@midrange.com>
Sent: Thursday, August 23, 2001 1:32 AM
Subject: Password Check Routine

> Does anybody have a rpg snippet, that would allow me to verify a username
> and password, and check it against the as/400 logon password file?
>
> I have seen this discussion before, and it's ok, if the failed password
> attempt gets updated on a failed attempt... It's going to be used in a web
> app, but I didn't want to use a protective block directive for this...
>
> Thanks, tim