Re: MFA, Re: Are there any V7R6 "Gotchas" that I would need to worry about?

Vern Hamberg via MIDRANGE-L <[email protected]> Mon, 29 Jun 2026 21:32:30 -0500
Newsgroups gmane.comp.hardware.ibm.midrange
Message-ID <[email protected]>
Hi Rob

I think you are spot on about the SBMJOB thing vis a vis MFA and password.

But I was curious about the SBMJOB thing and found info (perhaps 
somewhat off-topic!) about a new function usage - 
QIBM_RUN_UNDER_USER_NO_AUTH - Simon Hutchinson speaks of this in his 
site - 
https://www.rpgpgm.com/2025/08/prevent-my-user-profile-being-used-whenhtml 
- and this describes its use -

> In/IBM i/7.6 a new function usage,QIBM_RUN_UNDER_USER_NO_AUTH, was 
> created to deny anyone from using a given user profile in this way. 
> Its default is to allow an user profile to submit a job for another, 
> if it has at least use authority to the second user profile.

*Regards*

*Vern Hamberg*

IBM Champion 2025 <cid:[email protected]> CAAC 
(COMMON Americas Advisory Council) IBM Influencer 2023


On 6/26/2026 2:35 PM, Rob Berendt wrote:
> As far as SBMJOB goes, I don't recall ever having to supply a password on
> SBMJOB so I fail to see why I'd have to supply an authentication code.
>
> On Fri, Jun 26, 2026 at 3:33 PM Rob Berendt<[email protected]>
> wrote:
>
>> James,
>> Do you use any MFA which requires you to enter the six digit code?  Like
>> having a DUO or Authenticator app on your phone?  Why yes, we did have to
>> get the tinfoil hat guy here to get a smart phone instead of a flip phone.
>> Yes he keeps it in a Faraday bag when he's not using it.  It also supports
>> those key fob devices too.  It's important you have your time sync set up
>> right.
>> You can expect the same type of experience.
>> Signon screen changes to add the new authentication.
>> Many IBM GUI apps change to support the new authentication.
>> IBM even discusses how to append the code on to your password (ie
>> mypassw0rd:######) for applications like FileZilla which do not have an
>> authentication prompt.
>>
>> On Fri, Jun 26, 2026 at 3:07 PM James H. H. Lampert via MIDRANGE-L <
>> [email protected]> wrote:
>>
>>> Given that V7R6 adds MFA support, it's only a matter of time before one
>>> of our customers actually wants to use it.
>>>
>>> Two questions:
>>>
>>> 1) Is there anybody here who has enough experience with this new MFA
>>> support to describe the user experience?
>>>
>>> 2) Does MFA have any effect on SBMJOB with a USER() parameter?
>>>
>>> --
>>> JHHL
>>> --
>>> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
>>> list
>>> To post a message email:[email protected]
>>> To subscribe, unsubscribe, or change list options,
>>> visit:https://lists.midrange.com/mailman/listinfo/midrange-l
>>> or email:[email protected]
>>> Before posting, please take a moment to review the archives
>>> athttps://archive.midrange.com/midrange-l.
>>>
>>> Please [email protected] for any subscription related
>>> questions.
>>>
>>>
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact [email protected] for any subscription related questions.