Weird password validation problem

We had a situation (and I'm being intentionally vague here, partly for 
security and partly simply because there are certain things about the 
circumstances that I simply don't know) in which a user was able to sign 
on, and could be validate through a call to QSYGETPH, but then, through 
a mechanism I frankly don't know (but I suspect JDBC connections) that 
user got locked out by a string of 28 (!) failed validations.

If I did the same thing using my own user profile, everything worked 
fine. No failed validations; no lockout.

The situation was completely reproducible . . . until I tried plugging 
in a dummy password on his user profile, so that I could impersonate 
him. As soon as he was on the dummy password, the problem went away. I 
tried a different dummy password; still fine. A third dummy password, 
this time with a space and a punctuation mark, and still fine. Then he 
took back his account, switched it back to his own password, and 
everything was *still* fine.

The box is on V7R5, on password level 2. Has anybody here ever heard of 
anything like this happening?

--
JHHL
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support-FMtJrHiV//lnDLsaKlm4mFaTQe2KTcn/@public.gmane.org for any subscription related questions.

You can help support midrange.com by visiting https://donate.midrange.com and making a contribution.