Oh! I forgot-- we also have a product called >iSecure< that allows users to set up Challenge Questions so they can sign on, answer the question, and reset their own profiles. It took some finagling to make it work the way we wanted it to (I'm not sure it was all necessary), but it works reasonably well.
http://www.as-sure.com/
Paul E Musselman
PaulMmn@xxxxxxxxxxxxx
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Friday, June 22, 2018 4:14 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: RE: IBM i Password reset tool
We're currently looking at various methods for resetting a password for a user that forgot their password, and got varied off.
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Musselman, Paul
Sent: Friday, June 22, 2018 4:08 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: IBM i Password reset tool
PS-- we also have a file of profiles to never disable that we match against the DSPUSRPRF output file.
Paul E Musselman
PaulMmn@xxxxxxxxxxxxx
-----Original Message-----
From: Musselman, Paul
Sent: Friday, June 22, 2018 4:05 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: IBM i Password reset tool
Set QMAXSGNACN to 3 - Disable Device and Profile??
Or do you want the profile (or a specific profile) re-activated?
We have several scheduled jobs for passwords:
- change any profile that has never signed on to PASSWORD(*NONE)
- change any profile not used in 180 days to PASSWORD(*NONE)
- change profiles with passwords older than 60 days and not used will be DISABLED
- for selected shop floor accounts that get disabled, re-enable them automatically.
Most of these are based on DSPUSRPRF to an outfile, then reading that file (in a CLP) and doing appropriate things.
Paul E Musselman
PaulMmn@xxxxxxxxxxxxx
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Friday, June 22, 2018 3:53 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: RE: IBM i Password reset tool
Monitor for CPF1397
Cause . . . . . : The maximum number of sign on attempts specified by system
value QMAXSIGN has been reached. The device has been varied off for
security reasons.
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Musselman, Paul
Sent: Friday, June 22, 2018 3:39 PM
To: Midrange Systems Technical Discussion
Subject: RE: IBM i Password reset tool
Reset how? Automatically assign a new password after so many days? We just set the Password Expiration Interval. There are a few profiles, like QSECOFR, that don't reset ever...
Paul E Musselman
PaulMmn@xxxxxxxxxxxxx
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Friday, June 22, 2018 3:31 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: IBM i Password reset tool
Anyone in the group using a tool that will reset an IBM I passwords, either automatically or based on some other criteria?
Thank You
_____
Paul Steinmetz
IBM i Systems Administrator
Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071
610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home
psteinmetz@xxxxxxxxxx
http://www.pencor.com/
midrange.com
