RE: Passwords not meeting the rules

At this point, I am only going to answer the question that was asked and that answer is there is nothing on the system to tell me if a password conforms to the new rules. Hopefully they will drop it at that point because while there is no way to know what profiles do and don't need to be expired, there is also currently no guaranteed way to distinguish user profiles (5250 users) from service profiles (system to system like ODBC, FTP, etc.) and we don't want to expire those.

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Jim Oberholtzer
Sent: Friday, January 30, 2026 2:17 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: Re: Passwords not meeting the rules

Correct.

What I’ve done with my customers in this situation is to expire the password on user profiles in batches (to avoid mass issues when users manage to disable the profile after changing their password) and then the next time they try to sign on the system will force them in to the new rules.

High authority users (*ALLOBJ with * SECADM) rights will need to be on the honor system failing using the password rules keyword that enforces the rule universally.


Jim Oberholtzer
Agile Technology Architects

On Jan 30, 2026, at 12:21 PM, smith5646midrange@xxxxxxxxx wrote:

The answer appears to be "not with 100% certainty". There are possible clues but not an IBM supplied yes or no.

Thanks to all who replied.

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Jim Oberholtzer
Sent: Friday, January 30, 2026 1:13 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: midrange-l@xxxxxxxxxxxxxxxxxx; David Gibbs <david@xxxxxxxxxxxx>
Subject: Re: Passwords not meeting the rules

The only way to even get close to that is to check to see when the password was changed.

If after that date, you can be almost assured it matches the requirements. Almost because if you did not include the rule to force “All”’changes, higher authority users can avoid the rules with chgusrprf.

See the password system value QPWDRULES.


Jim Oberholtzer
Agile Technology Architects

On Jan 30, 2026, at 10:48 AM, David Gibbs via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

On Fri, Jan 30, 2026 at 10:34 AM <smith5646midrange@xxxxxxxxx> wrote:

I have now been asked if I can provide a list of users that have a
password that does not meet the new requirements.

It seems to me that, on a secure system, that should be impossible.

david
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.