Re: MIDRANGE-L Digest, Vol 7, Issue 708

[ALopez@xxxxxxxxxx]

> Mike,  I temporarily set the password level to 2 on our mirrored HA
> machine several months ago, just to try 128-character passwords.
> QINTER subsystem automatically began displaying the QSYS/QDSIGNON2
> display file which has the 128-byte password field. 

If you have a customized version of the display file, and a password level 
of 2 or 3, the subsystem will check the display file.  If the display file 
does not have room for the 128 character password, it will default to 
QDSIGNON2: 
http://www-1.ibm.com/support/docview.wss?uid=nas117c5be565b7cd14186256d800046f43a 
(rather cool, I think).  Every shop I've seen has a customized one, so I 
tend to assume that everyone else does as well.


> We may eventually go to level 2, as the advantages seem worth it.

We have certainly felt like it was worthwhile.  With the new SYSVALs for 
passwords it looks even better.  The new QPWDRULES options seem to be well 
designed.  The ability to require 0 - 9 letters, 0 - 9 numbers, and 0 - 9 
upper/lower case letters is sweet.  The *REQANY3 will let you specify that 
passwords must have three out of the following: uppercase letters, 
lowercase letters, digits and special characters if at password levels 0 
or 1, so there are plenty of enhancements for even those that don't move 
to password levels 2 or 3. 

And we finally get to control the number of days before password 
expiration to begin displaying the warning messages (from 1 to 99).  That 
will make those users not on SSO here very, very happy.