RE: [EXTERNAL] Re: AS400 Object

Thanks for the quick response

We would like to secure the password used to create the AS400 object.
This is what we do
AS400  sys = new AS400(system , genericuser ,password)

Sys.validatesignon(username , userpassword)

Password for the creating the sys object is hardcoded and would like to take it off the code..

Dilip Nair



From: JAVA400-L <[email protected]> On Behalf Of Jim Oberholtzer
Sent: Tuesday, August 20, 2024 10:19 AM
To: Java Programming on and around the IBM i <[email protected]>
Subject: [EXTERNAL] Re: AS400 Object

If the users have IBM i profiles, just use the API to check the user password. See Scott Klements (far more concise and understandable than IBMs version) web site: Validating a user-id and password (scottklement. com) <https: //urldefense. com/v3/__https: //www. scottklement. com/rpg/socktut/valuserid. html__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUCXYbAtq$>
ZjQcmQRYFpfptBannerStart
This Message Is From an Untrusted Sender
You have not previously corresponded with this sender.
ZjQcmQRYFpfptBannerEnd

If the users have IBM i profiles, just use the API to check the user

password.



See Scott Klements (far more concise and understandable than IBMs version)

web site:

Validating a user-id and password (scottklement.com)

<https://urldefense.com/v3/__https://www.scottklement.com/rpg/socktut/valuserid.html__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUCXYbAtq$<https://urldefense.com/v3/__https:/www.scottklement.com/rpg/socktut/valuserid.html__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUCXYbAtq$>>







--

Jim Oberholtzer

Chief Technical Architect

Agile Technology Architects





On Tue, Aug 20, 2024 at 9:14 AM Nair, Dilip <[email protected]<mailto:[email protected]>>

wrote:



> Hello

>

> We are currently using AS400 object to validate user profiles and invoke

> RPG programs from Java.

>

> User and password to create the object is hardcoded in the program.

>

> Looking for ideas on how to secure the password than hardcoding in the

> program

>

> Any help is appreciated

>

> Dilip Nair

>

>

>

> Please consider the environment before printing this email.

>

> E-mail messages may contain viruses, worms, or other malicious code. By

> reading the message and opening any attachments, the recipient accepts full

> responsibility for taking protective action against such code. Henry Schein

> is not liable for any loss or damage arising from this message.

>

> The information in this email is confidential and may be legally

> privileged. It is intended solely for the addressee(s). Access to this

> e-mail by anyone else is unauthorized.

> --

> This is the Java Programming on and around the IBM i (JAVA400-L) mailing

> list

> To post a message email: [email protected]<mailto:[email protected]>

> To subscribe, unsubscribe, or change list options,

> visit: https://urldefense.com/v3/__https://lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$<https://urldefense.com/v3/__https:/lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$>

> or email: [email protected]<mailto:[email protected]>

> Before posting, please take a moment to review the archives

> at https://urldefense.com/v3/__https://archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$<https://urldefense.com/v3/__https:/archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$>.

>

--

This is the Java Programming on and around the IBM i (JAVA400-L) mailing list

To post a message email: [email protected]<mailto:[email protected]>

To subscribe, unsubscribe, or change list options,

visit: https://urldefense.com/v3/__https://lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$<https://urldefense.com/v3/__https:/lists.midrange.com/mailman/listinfo/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUGwjgEiN$>

or email: [email protected]<mailto:[email protected]>

Before posting, please take a moment to review the archives

at https://urldefense.com/v3/__https://archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$<https://urldefense.com/v3/__https:/archive.midrange.com/java400-l__;!!C8D7Pa6reTSs!d-85VCikDeee9x4C10W76rOlybAi0iEazebjWVKQL-4AC0nikvwGaydO09oCVH5kKfFThrROC2K3k1vhYN4OUL5iTlbQ$>.

Please consider the environment before printing this email.

E-mail messages may contain viruses, worms, or other malicious code. By reading the message and opening any attachments, the recipient accepts full responsibility for taking protective action against such code. Henry Schein is not liable for any loss or damage arising from this message.

The information in this email is confidential and may be legally privileged. It is intended solely for the addressee(s). Access to this e-mail by anyone else is unauthorized.
-- 
This is the Java Programming on and around the IBM i (JAVA400-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/java400-l
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/java400-l.