Tivoli Identity Manager.

We're in the process of installing Tivoli Identity Manager to sync 
passwords with various systems.  It has a hook into the QPWDVLDPGM system 
value using *REGFAC to process CHGPWD and send it on into TIM.  Odd thing 
is that it insists on using SSL to talk to the TIM server, but stores the 
password in the clear in your joblog and in 
/QIBM/UserData/tivoli/qpwdsync.log

A sample from the qpwdsync.log:
... userDN="erUid=TTEST" pswd="NEWPWD" ...

A sample from the job log:
CPF9898    Diagnostic              40   06/02/10  13:55:59.523017 
QITIMPWSYN   QITIM       *STMT    QITIMPWSYN  QITIM       *STMT
                                     From module . . . . . . . . : 
QITIMPWSYN
                                     From procedure  . . . . . . : 
WriteLogEntry__6LoggerFPcT1
                                     Statement . . . . . . . . . :   15
                                     To module . . . . . . . . . : 
QITIMPWSYN
                                     To procedure  . . . . . . . : 
WriteLogEntry__6LoggerFPcT1
                                     Statement . . . . . . . . . :   15
                                     Message . . . . :   POST 
/passwordsynch/synch
                                       HTTP/1.0  Host:...IP ADDR...:9443 
Content-type: text/xml  content-length:
                                       270  connection: close    <?xml 
version="1.0"
                                       encoding="UTF-8"?> <PSWD_REQ_MSG> 
<CREDENTIALS principal="ROB" pswd=""/>
                                       <REQUEST op="synch"
 
srcDN="erglobalid=...somenumbers...,ou=services,erglobalid=...moreNumbers...
                                       0000,ou=Dekko,dc=com" 
userDN="erUid=TTEST"
                                       pswd="NEWPWD"/> </PSWD_REQ_MSG> .
                                     Cause . . . . . :   This message is 
used by application programs as a general
                                       escape message.
Note:  Look for the pswd with NEWPWD.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.