RE: Password Validation

["Graap, Ken" <keg@xxxxxxxxxxxxxxxxxx>]

>I want to implement a simple password validation program to disallow
>passwords such as "password", the company name, etc. 

Sturat - 

You can do quite a bit without having to implement a password validation
program at all....

Have you looked at the following system values closely?

        System                                                       
        Value           Type            Description

        QPWDLMTAJC      *SEC            Limit adjacent digits in password

        QPWDLMTCHR      *SEC            Limit characters in password

        QPWDLMTREP      *SEC            Limit repeating characters in
password 
        QPWDMAXLEN      *SEC            Maximum password length

        QPWDMINLEN      *SEC            Minimum password length

        QPWDPOSDIF      *SEC            Limit password character positions

        QPWDRQDDGT      *SEC            Require digit in password

        QPWDRQDDIF      *SEC            Duplicate password control 

For example, the word PASSWORD would not be allowed if you limited repeating
characters via QPWDLMTREP.

Specify AEIOU for QPWDLMTCHR and you would eliminate a lot of English
words...

Requiring a digit in a password could be enforced via the QPWDRQDDGT system
value...

With all this functionality I would think that most shops could get by quite
nicely without having to validate passwords via an exit program.
          

Kenneth

--
********************************
         Kenneth  E.  Graap             
    IBM Certified Specialist                 
          AS/400   Professional                   
          System  Administrator                  
 NW Natural - Information Services        
           System Services                         
        503 226 4211 X5537                 
          FAX  603 849 0591                  
      keg@nwnatural.com               
********************************


-----Original Message-----
From: Allen, Stuart [mailto:sallen@fellowes.com]
Sent: Monday, June 14, 1999 8:06 AM
To: 'MIDRANGE-L@midrange.com'
Subject: Password Validation


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---