Re: Web based password change system

[Jim Langston <jimlangston@xxxxxxxxxxxxxxxx>]

Ahh, yes, but since you are running this from an RPG CGI type
script, it will be running as the authority of the QTMHHTP1 or
QTMHHTTP (dont' remember which) and not the user profile you are
looking for.  As long as that user profile has access to the
API you're fine.

I seem to recall having to use adopted authority on the RPG
program though that actually changed the password.

Regards,

Jim Langston

Me transmitte sursum, Caledoni!

Andrew.Lutz@abbott.com wrote:
> 
> Walden,
> 
> With the HTTP signon, If QSYCHGW existed in a secured area, you can't get to
> it to call it, if the password is expired.
> 
> 
>                     "Walden H.
>                     Leverich"              To:     "'WEB400@midrange.com'" 
><WEB400@midrange.com>
>                     <WaldenL@techso        cc:
>                     ftinc.com>             Subject:     RE: Web based 
>password change system
>                     Sent by:
>                     owner-web400@mi
>                     drange.com
> 
> 
>                     07/03/2001
>                     02:36 PM
>                     Please respond
>                     to WEB400
> 
> 
> 
> What's the concern with expired passwords? QSYCHGPW doesn't care if the
> password is expired.
> 
> -Walden
> 
> -----Original Message-----
> From: David Gibbs [mailto:dgibbs@mks.com]
> Sent: Tuesday, July 03, 2001 2:42 PM
> To: 'WEB400 Mailing List'
> Subject: RE: Web based password change system
> 
> The issue may be moot now ... but ideally, we would like to see something
> that can handle expired or unexpired passwords.  If the password is expired,
> it should still validate that the old password is correct ... but allow a
> change.
> 
> david
> 
> > -----Original Message-----
> > From: Andrew.Lutz@abbott.com [mailto:Andrew.Lutz@abbott.com]
> > Sent: Tuesday, July 03, 2001 1:36 PM
> > To: WEB400@midrange.com
> > Subject: Re: Web based password change system
> >
> >
> >
> > Jim,
> >
> > This will not work if the password is in 'expired' status.
> >
> > I am using the same solution for changing passwords.  The
> > catch...if the user
> > has let their password expire.
> >
> > The only exception I can think of  --- Are running this program from a
> > unsecured area?
> >
> +---
> | This is the WEB400 Mailing List!
> | To submit a new message, send your mail to WEB400@midrange.com.
> | To subscribe to this list send email to WEB400-SUB@midrange.com.
> | To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
> +---
> | This is the WEB400 Mailing List!
> | To submit a new message, send your mail to WEB400@midrange.com.
> | To subscribe to this list send email to WEB400-SUB@midrange.com.
> | To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---
> 
> +---
> | This is the WEB400 Mailing List!
> | To submit a new message, send your mail to WEB400@midrange.com.
> | To subscribe to this list send email to WEB400-SUB@midrange.com.
> | To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

--
+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---