Re: New Password rules at VRM610

Simon Coulter <shc-Q/[email protected]> Wed, 23 Apr 2008 07:39:50 +1000
Newsgroups gmane.comp.systems.as400.security
Message-ID <[email protected]>
On 23/04/2008, at 3:42 AM, [email protected] wrote:
> Limiting characters was a good way to forbid words.  Taking out  
> vowels was
> a common technique.  Removing this capability does not do much for
> "freedom of choice" for administrators.

Yes, that's my point.

>
> However, from a V6R1 machine:
>
> Message ID . . . . . . :   CPF22C5
> Date sent  . . . . . . :   04/22/08      Time sent  . . . . . . :  
> 13:41:14
>
>
> Message . . . . :   Password contains one of the following: A.
>
> Cause . . . . . :   The password rule for restricted characters in
> passwords
>   (system value QPWDLMTCHR) requires that they not contain any of the
>   following characters: A.
> Recovery  . . . :   Specify a new password that does not contain  
> any of
> the
>   restricted characters.

The error message still exists because you may be running with  
QPWDRULES set to *PWDSYSVAL which means the old rules (and system  
values) are in effect.

Once you change to the new rules you lose one of the old ones. I  
think it should still be available as an option (*CHRLMTCHR or  
*LTRLMTCHR or something).

Normally, when a feature is removed the IBM documentation is pretty  
good at pointing that out. I can't find any such indication hence my  
question.

Regards,
Simon Coulter.
--------------------------------------------------------------------
    FlyByNight Software         OS/400, i5/OS Technical Specialists

    http://www.flybynight.com.au/
    Phone: +61 2 6657 8251   Mobile: +61 0411 091 400        /"\
    Fax:   +61 2 6657 8251                                   \ /
                                                              X
                  ASCII Ribbon campaign against HTML E-Mail  / \
--------------------------------------------------------------------



_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.