RE: Checking the validity of AS400 login details

["Neill Harper" <neill.harper@xxxxxxxx>]

You took the time to write the code... why don't you run it to find out :-)


-----Original Message-----
From: java400-l-bounces@xxxxxxxxxxxx [mailto:java400-l-bounces@xxxxxxxxxxxx]
On Behalf Of Walden H. Leverich
Sent: 27 August 2009 18:01
To: Java Programming on and around the iSeries / AS400
Subject: RE: Checking the validity of AS400 login details

> That's right. Doing it remotely I only need the 
> AS400 address to make an AS400 object to validate user:

Interesting.... so what would happen if you coded this?

AS400 as400 = new AS400();
	
try {
    as400.setSystemName("as400-ip");
    for(int =0; i<100; i++)
        boolean ok = as400.validateSignon('QSECOFR', 'WRONGPASSWORD');
}
catch (Exception  exc) {
   errors = exc.getMessage();
}


Seems like a DOS attack to me. I can disable any user profile on the
system I want to. :-) Granted you could just go to a signon screen and
type in the same thing, but this seems "easier" to do. 

-Walden