RE: Password security

["Bob Cozzi" <cozzi@xxxxxxxxx>]

If you're not going to encrypt your passwords within your database, you
might consider creating a validation list object, and storing the user IDs
and passwords in there. In a validation list you can encrypt a password. And
the biproduct is that end-users cannot query the information in the
validation list.

Bob Cozzi

-----Original Message-----
From: rpg400-l-bounces@midrange.com [mailto:rpg400-l-bounces@midrange.com]
On Behalf Of Deepak Deshpande
Sent: Thursday, January 23, 2003 7:40 AM
To: rpg400-l@midrange.com
Subject: Password security


Hello,

I am working on a tool development. The tool can be run by certain users
defined in my database. I do not want to give access to this database to any
user except the program using that database. The user should not see the
password by running the query. How can I maintain this security?

Deepak Deshpande

_______________________________________________
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@midrange.com To subscribe, unsubscribe, or
change list options,
visit: http://lists.midrange.com/mailman/listinfo.cgi/rpg400-l
or email: RPG400-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.