I still don't see how anyone can hack a userid and  password and log on to a 
RACF protected system.  If you have security set up correctly, you only get 3 
tries or so, and then the ID is revoked.

Eric

---- Doc Farmer <[EMAIL PROTECTED]> wrote: 
> Heck, Nigel Pentland has two utilities that look for weak passwords (DOS-
> based) that I'ved used for quite some time to ensure a client is using strong 
> passwords - CRACF and WEAKWORD.  One just checks the USERID or 
> DFLTGRP name, and the other uses a dictionary list.  WEAKWORD (the 
> dictionary list one) doesn't display the password.  So yes, the passwords are 
> recoverable - after a fashion.
> 
--
Eric Bielefeld
Systems Programmer
Aviva USA
Des Moines, Iowa
515-645-5153

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to