RE: Need to generate passwords

["Wills, Mike N. (TC)" <MNWills@xxxxxxxxxxxxxx>]

My big question on this is, how does this prevent anything? As admin on the
server, you can still reset the password. Yes, it prevents others from
getting to "the new guys" info, but other than that?

-----Original Message-----
From: Narayanan R Pillai [mailto:strqst400@yahoo.com]
Sent: Wednesday, October 23, 2002 3:23 PM
To: midrange-l@midrange.com
Subject: Re: Need to generate passwords


I think the requirement was to generate an initial password and then give
the password to the new user. I am sure that the profile is PWDEXP(*YES)
along with this. This allows the user to reset it to a "non-sticky-note"
password.

Have I gotten this right ? Oh yeah and dhart has it right, do not use Q
before the password, the code that I posted was used to generate file-names
like the QRPLOBJ filenames. It was NOT used to generate passwords.

Regards
Narayanan R Pillai
Senior Technical Architect
American Medical & Life Insurance

----- Original Message -----
From: <HankHeath@aol.com>
To: <midrange-l@midrange.com>
Sent: Wednesday, October 23, 2002 3:59 PM
Subject: Re: Need to generate passwords


> --
> [ Picked text/plain from multipart/alternative ]
> I ran into this problem, too. My solution is a little strange. I noticed
that
> "random" passwords just got put on the post-it's on the edge of the
screen.
> So they are self defeating.
>
> Instead, we are using pass phrases. For example, a pass phrase might be
"We a
> re the hero of our own story" ( a quote by Mary McCarthy).
>
> The associated password is wathooos (the first letter of each word in the
> pass-phrase).
>
> Need to have a numeric in there somewhere?
>
> "Saint Patrick was born in 461 AD" yields spwbi4a as a password.
>
> Even when the pass phrases are on post-its, they are not obvious. In fact,
I
> encourage my people to have a number of quotes on post-its on their
> terminals. Only they know which one is the phrase that pays.
>
> - Hank Heath
>
> In a message dated 10/23/2002 2:12:58 PM Eastern Daylight Time,
> Steve.McKay@SouthTrust.com writes:
>
>
> > Does anyone have a CL/RPG/COBOL solution to generate "random" passwords?
> > Auditing has a problem with me "assigning" an initial password (even if
it
> > is set to "*EXPIRED") and wants to programatically generate a password
for
> > each new user.
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.