Password validation using "in-house" program

[David Abramowitz]

It might be simpler to use a secondary security screen. create your secondary passwords, or secondary security system. At initial sign on have the user profile start up with your secondary system. This leaves initial security intact. Dave

[edfishel@us.ibm.com]

You can find the description of the parameters passed to a Password Approval Program created for the QPWDVLDPGM system value in Chapter 3 of the Security Reference manual. A sample program is also provided. Ed Fishel

[cjwoodbury@attglobal.net]

Writing the password validation program is not difficult. As Ed states, there are sample programs in the iSeries Security Reference manual. (This manual is available in .PDF format at the IBM InfoCenter website. Go to www.iseries.ibm.com/infocenter. Choose the geography, then the language and release. Look for Security in the left hand nav bar and open it. You'll find Security Reference in this list.) Because the program receives the user's password in clear text, make sure you tightly secure the source for this program so that it cannot be tampered with and only use the program for password validation. I've seen this program used as a mechanism to store cleartext passwords, which is (obviously) not a good idea.

[odiaz]

[lls_51@yahoo.com]

Carol, I am running V5R1 - when I select this on the security site, I get nothing. Can you post the validation program or email it to me or email the SC number of the security reference? Thanks Larry Swain lls_51@yahoo.com

[odiaz]

We are implementing a new security policy. In order to enforce the passwords rules that we are defining seems to be that I need to write a program. System Value QPWDVLDPGM allows you to use a non-IBM program to perform extra password validation. Has anyone used that approach before? What parameter(s) (and how many), my validation program should be expecting? Please advice.

[cjwoodbury@attglobal.net]

The iSeries Security Reference manual number is SC41-5302 To find the .PDF in V5R1, go to www.iseries.ibm.com/infocenter, choose the geography, choose V5R1, open the Security topic in the left hand nav pane, then open Manuals and Redbooks. It should be the second manual listed.