Re: AS400 Automatic Sending of New Password?

[John McKee <jmmckee@xxxxxxxxxxxxxx>]

Too mant people had QSECOFR access.  The one getting ready to make 
things worse
did not read the text for the user profile, and that the gender of that 
comment
did not match the gender of the caller.  Two strikes.  That person was more
inclined to "help" users than to be sure that the right user was being helped.

John McKee

Quoting fbocch2595@xxxxxxx:

> Ideally, there would be verification/challenge questions to make sure 
> the user was correct.
>
>
>
>
> -----Original Message-----
> From: John McKee <jmmckee@xxxxxxxxxxxxxx>
> To: midrange-l@xxxxxxxxxxxx
> Sent: Thu, Jun 18, 2009 3:47 pm
> Subject: Re: AS400 Automatic Sending of New Password?
>
>
>
> Happened to me some years back.  User had the wrong user name.  
> Another person
> was all set to change the password and set it to *EXPIRED so this user could
> log on and try again.  Two people with same last name.
>
> John McKee
>
> Quoting Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>:
>
> > What if someone posed as another user?   for example, if Joe wanted
> > Bob's password, Joe could say "This is Bob.  I've tried my password and
> > it's not working." and you'd give him Bob's password!
> >
> > McGovern, Sean wrote:
> > > At a previous company, certain users would complain frequently about
> > > the system not accepting their password and asking for a reset. I got
> > > fed up, and wrote a routine to store the unencrypted password using
> > > an exit point program.
> > >
> > > After that, when users called, I could tell them what their password
> > > was. "Oh yeah, that was it", they would say.
> >
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
>
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.