I still don't see how anyone can hack a userid and password and log on to a RACF protected system. If you have security set up correctly, you only get 3 tries or so, and then the ID is revoked.
Eric ---- Doc Farmer <[EMAIL PROTECTED]> wrote: > Heck, Nigel Pentland has two utilities that look for weak passwords (DOS- > based) that I'ved used for quite some time to ensure a client is using strong > passwords - CRACF and WEAKWORD. One just checks the USERID or > DFLTGRP name, and the other uses a dictionary list. WEAKWORD (the > dictionary list one) doesn't display the password. So yes, the passwords are > recoverable - after a fashion. > -- Eric Bielefeld Systems Programmer Aviva USA Des Moines, Iowa 515-645-5153 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

