RE: User Profile Info

["Sannan Solberg" <ssolberg@xxxxxxxxxxxx>]

I like this solution and our security risk would be really low.  (not
smart users...)  But when I try to do the command below manually, I get
"Constraint is not valid" ??  What am I missing?  Thanks in advance.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Tuesday, August 28, 2007 1:14 PM
To: Midrange Systems Technical Discussion
Subject: Re: User Profile Info

Some might consider it a security risk but we do have a nightly job that
does a DSPUSRPRF of all profiles to an output file.  If you want to use
a language, like RPGLE, against it and CHAIN to a record, it's really
easy to add a key to the file by simply doing this:
ADDPFCST FILE(USERLIST) TYPE(*PRIKEY) KEY(UPUPRF) No need to build a
logical file.

The security risk factor is that any dweeb can query the file and find
out a list of all user profiles and get cute with those that have never
changed their passwords from default.  A rather significant percentage
actually.  Then again, it depends on your definition of significant.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Sannan Solberg" <ssolberg@xxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/28/2007 02:56 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
cc

Fax to

Subject
User Profile Info






Sorry for the "newbie" question but wondering if there is a table(s)
that contains info about user profiles?  In particular, I was hoping to
find a table that has the Text decryption of a user profile.  I've got
an outside table that all it maintains is the User Profile Name but not
the text decryption of the User.  I would like to link up to the file(s)
to get more info about them.