as400 password change history

285 pts.
Tags:
AS/400 passwords
Password management
Password system value
Hi i would like to ask how to display the system value for Password Change History? Thanks, /chris

Answer Wiki

Thanks. We'll let you know when a new response is added.

Chris,

I am assuming you mean Duplicate Password Control
dspsysval qpwdrqddif
This controls how often a user can repeat the use of a password.

Bill Poulin

Hi Bill,
this is what im looking for base on my auditor.
i need to change the current value to 6

Thank you so much and also to those who give their input.

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • djac
    The only system value I can think of that in any way fits this query is the QPWDRQDDIF sysval, which sets how many different passwords must be used before they can be re-used. DSPSYSVAL (or WRKSYSVAL) QPWDRQDDIF... If this is not what you are after then you will need to provide more information on what it is you are wanting to do.....
    900 pointsBadges:
    report
  • WoodEngineer
    The i Series does not store passwords in a way the users can retrieve and de-crypt them. It keeps the list internally somewhere. Maybe someone knows how to hack into this data. I suspect some sort of hash total is used, which is not reversable according to the experts I heard. If you really want to keep a history, you can write an command validation program to capture the data at the time the use changes their password. The system does a great job of this automatically. I strongly recommend against trying to work around this security feature.
    6,530 pointsBadges:
    report
  • DanD
    Set the system value QPWDEXPITV *SEC Password expiration interval to the desired number of days for all profiles, change all profiles expint to *SYSVAL and you will force a regular pwd change. The industry standard is pretty much 90 for normal users and 30-45 for power users. You could also turn on user auditing for Security dump and query your audit journal on a regular basis and track pwd changes. BTW, i5OS finally went to a UNIX style encrypted pwd file, so several of the third party security packages allow you to see pwds and to check for pwds that are too 'simple'. You usually must be signed on as QSECOFR to use these functions.
    2,865 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following