Re: Password Security

From:
rob@xxxxxxxxx
To:
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date:
07/26/2012 09:25 AM
Subject:
Re: Password Security
Sent by:
midrange-l-bounces@xxxxxxxxxxxx

Yes you are the only one. :-) Do you really think there are that many
IBM i educational institutions that want you to also know how to check

the

status of websphere products running on the i? I even wonder if

Websphere

is covered in any of the questions in the IBM i Operations certification.

To me it sounds more like the boss is trying to give his kid a job

running

their IBM i when he's more familiar with how to operate his iphone. And
the boss wants to do it without investing in education. But let's give
the boss some benefit of the doubt. Perhaps he wants the lad to flounder

long enough to start to know what he DOESN'T know. So that when

education

does start coming it will make sense, be taken with gusto, etc.


Rob Berendt
--

I hope that's the case too. I don't remember seeing the Websphere part of
the question.I've been traveling and may have missed it. But the 5 things
listed below are basic system operations stuff. I actually took an
operations class with my RPG classes back in the mid 90's.

1) Increase Minimum password lenght to 8 chars and introduce
alphanumerical complexity.
QPWDMINLEN *SEC Minimum password length
QPWDRQDDGT *SEC Require digit in password
2) Increase password history to 12 previous passwords.
QPWDRQDDIF *SEC Duplicate password control
3) Prevent users setting password to username
4) Prevent system and user profiles from logging onto
multiple workstations at the same time profiles with interactive QRY.
QLMTDEVSSN (regarding 4th point how many session we can limit with
QLMTDEVSSN.)

5) Password must be reset with 3 months.