RE: Web based password change system

[Andrew.Lutz@xxxxxxxxxx]

Walden,

With the HTTP signon, If QSYCHGW existed in a secured area, you can't get to
it to call it, if the password is expired.



                                                                                
                                     
                    "Walden H.                                                  
                                     
                    Leverich"              To:     "'WEB400@midrange.com'" 
<WEB400@midrange.com>                     
                    <WaldenL@techso        cc:                                  
                                     
                    ftinc.com>             Subject:     RE: Web based password 
change system                         
                    Sent by:                                                    
                                     
                    owner-web400@mi                                             
                                     
                    drange.com                                                  
                                     
                                                                                
                                     
                                                                                
                                     
                    07/03/2001                                                  
                                     
                    02:36 PM                                                    
                                     
                    Please respond                                              
                                     
                    to WEB400                                                   
                                     
                                                                                
                                     
                                                                                
                                     




What's the concern with expired passwords? QSYCHGPW doesn't care if the
password is expired.

-Walden

-----Original Message-----
From: David Gibbs [mailto:dgibbs@mks.com]
Sent: Tuesday, July 03, 2001 2:42 PM
To: 'WEB400 Mailing List'
Subject: RE: Web based password change system


The issue may be moot now ... but ideally, we would like to see something
that can handle expired or unexpired passwords.  If the password is expired,
it should still validate that the old password is correct ... but allow a
change.

david

> -----Original Message-----
> From: Andrew.Lutz@abbott.com [mailto:Andrew.Lutz@abbott.com]
> Sent: Tuesday, July 03, 2001 1:36 PM
> To: WEB400@midrange.com
> Subject: Re: Web based password change system
>
>
>
> Jim,
>
> This will not work if the password is in 'expired' status.
>
> I am using the same solution for changing passwords.  The
> catch...if the user
> has let their password expire.
>
> The only exception I can think of  --- Are running this program from a
> unsecured area?
>
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---




+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---