Re: Where are the System i password storeds?

[Larry Bolhuis <lbolhuis@xxxxxxxxxx>]

They are in the user profile object. I have been able to determine 
exactly where in the profile in the past but haven't looked in a few 
releases. They are in fact encrypted though so while I could see where 
they were I couldn't read them or decrypt them. There have been tools to 
do so though because with short passwords there are only a limited 
number of characters allowing a brute force attack to succeed quite 
quickly. If you use long password support then it gets a whoooooole lot 
harder to decrypt them by brute force.

 - Larry

Steve Landess wrote:
> All -
>
> I'm having a "discussion" with another developer right now about where AS/400 - 
> iSeries - System i passwords are stored.
> He says that they are stored in a file - I say that they are encrypted and 
> stored within the user profile.
>
> Who is right?
> Is there an IBM link that discusses this information somewhere on their web 
> site?
>
> Regards,
> Steve Landess
> Austin, Texas
>
> All animals are equal but some animals are more equal than others. 
> - George Orwell
>