RE: Web based password change system

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

What's the concern with expired passwords? QSYCHGPW doesn't care if the
password is expired. 

-Walden

-----Original Message-----
From: David Gibbs [mailto:dgibbs@mks.com]
Sent: Tuesday, July 03, 2001 2:42 PM
To: 'WEB400 Mailing List'
Subject: RE: Web based password change system


The issue may be moot now ... but ideally, we would like to see something
that can handle expired or unexpired passwords.  If the password is expired,
it should still validate that the old password is correct ... but allow a
change.

david

> -----Original Message-----
> From: Andrew.Lutz@abbott.com [mailto:Andrew.Lutz@abbott.com]
> Sent: Tuesday, July 03, 2001 1:36 PM
> To: WEB400@midrange.com
> Subject: Re: Web based password change system
> 
> 
> 
> Jim,
> 
> This will not work if the password is in 'expired' status.
> 
> I am using the same solution for changing passwords.  The 
> catch...if the user
> has let their password expire.
> 
> The only exception I can think of  --- Are running this program from a
> unsecured area?
> 
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---