Re: Interesting discussion on ServerFault regarding an idiotic auditor ...

[email protected] Wed, 27 Jul 2011 15:06:07 -0400
Newsgroups gmane.comp.systems.as400.security
Message-ID <OF3EDE0C13.0ED2392B-ON852578DA.0068591E-852578DA.0068EEB4@DEKKO.COM> 
I am sure there are a few people that have used QPWDVLDPGM to track this. 
Of course, that doesn't catch CHGUSRPRF or CRTUSRPRF - just CHGPWD (and 
iNav).  I know I've heard of people who want to use that to tell people 
what their password is (when forgotten) instead of just resetting it and 
expiring it.  Not that I agree with it - just that I know the practice is 
out there.


Rob Berendt
-- 
Group Dekko
Dept 1600
Mail to:  2505 Dekko Drive
          Garrett, IN 46738
Ship to:  Dock 108
          6928N 400E
          Kendallville, IN 46755
http://www.dekko.com





From:   DrFranken <midrange-f4GYfadWyJRWk0Htik3J/[email protected]>
To:     security400-Zwy7GipZuJhWk0Htik3J/[email protected]
Date:   07/27/2011 02:59 PM
Subject:        Re: [Security400] Interesting discussion on ServerFault 
regarding an idiotic auditor ...
Sent by:        security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]



Two words: FIRE HIM.

I hope this is a test and if it isn't get a new auditor. ANY Admin who 
CAN provide this also should replaced *IMMEDIATELY.

     - Larry "DrFranken" Bolhuis

On 7/27/2011 1:12 PM, David Gibbs wrote:
> http://urlq.us/2g
>
>
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) 
mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.