RE: UserId Validation against AS/400 userprofile

["JIM LANGSTON" <JLANGSTON@xxxxxxxxxxx>]

If I remember correctly there actually isn't an API to Check user password.
But, you can check user passwords using a security API.

If you use the QSYCHGPW API (Change user password) it requires 3 input
fields, user id, current password, and new password and it returns a result.
If you pass it the user id, and then the password you are checking for both
parameters what you are actually attempting to do is to change the user
password to the current password.  It won't really do anything, but it will
let you know if the user password is correct.

1.4 Change User Password (QSYCHGPW) API

   | |  1 | User ID                                  | Input  | Char(10)  |
|
   | |  2 | Current password                         | Input  | Char(10)  |
|
   | |  3 | New password                             | Input  | Char(10)  |
|
   | |  4 | Error code                               | I/O    | Char(*)   |
|

CPF2204 E     User profile &1 not found.
CPF2217 E     Not authorized to user profile &1.
CPF24B4 E     Severe error while addressing parameter list.
CPF3C1D E     Length specified in parameter &1 not valid.
CPF3C21 E     Format name &1 is not valid.
CPF3C90 E     Literal value cannot be changed.
CPF3CF1 E     Error code parameter not valid.
CPF9872 E     Program or service program &1 in library &2 ended. Reason code
&3.
FPE0211 E     Parameter length &1 not valid for field &2.
FPE0212 E     Field offset and length not within data.
FPE0215 E     Could not find authentication entry for &1.

Now, you write a small RPG program that interfaces to this API.  This RPG
program
accepts 2 parameters (user name and password) and returns one parameter
(error or
success).  This RPG program calls the API and looks to see if there is an
error
returned.  If there is an error returned, it returns either that error code
(if
you want to see what it is in your program) or just passes an error.

If there is a validate user API, I can't find it.  This is how I've done it
in the
past.

Regards,

Jim Langston

-----Original Message-----
From: owner-web400@midrange.com [mailto:owner-web400@midrange.com]On Behalf
Of Pillai, Sushama
Sent: Tuesday, July 31, 2001 11:29 AM
To: WEB400@midrange.com
Subject: UserId Validation against AS/400 userprofile


What do I have to do to be able to validate the userid and password against
the AS400 user profile from my ASP script. Any help is highly appreciated.
Thanks in advance.
Sushama




+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---