Yes - we used one years ago - as part of a govt audit - one year it got accidentally run multiple times and the multiple failed passwords exceeded the RACF/ACF2 threshhold - thousands of accounts were locked until unlocked the next day ... I do not have firsthand knowledge of the name of the product, only that it existed
Chris Hoelscher Lead Sys DBA IBM Global Technical Services on assignmemt to Humana Inc. T 502.476.2538 or 502.407.7266 -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Tom Brennan Sent: Monday, January 11, 2021 9:40 AM To: [email protected] Subject: Re: [IBM-MAIN] Code to verify LOGON password [External Email: Use caution with links and attachments] Isn't there a program someone wrote (talked about here many years ago) that can try various passwords until something matches the hashed value? If that's the case, hashing doesn't really do as much good as people think it does, once someone gets hold of the RACF dataset of course. On 1/10/2021 7:57 PM, Timothy Sipples wrote: > Here's a pedantic point: RACF doesn't actually know what the user's > password is -- thank goodness. RACF can only determine whether a > particular password or passphrase string mathematically corresponds to > the hashed value (derived from previous input) that RACF stores. True, > good hashing functions minimize collisions, and RACF uses good hashing > functions. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information. Humana Inc. and its subsidiaries comply with applicable Federal civil rights laws and do not discriminate on the basis of race, color, national origin, ancestry, age, disability, sex, marital status, gender, sexual orientation, gender identity, or religion. Humana Inc. and its subsidiaries do not exclude people or treat them differently because of race, color, national origin, ancestry, age, disability, sex, marital status, gender, sexual orientation, gender identity, or religion. English: ATTENTION: If you do not speak English, language assistance services, free of charge, are available to you. Call 1‐877‐320‐1235 (TTY: 711). Español (Spanish): ATENCIÓN: Si habla español, tiene a su disposición servicios gratuitos de asistencia lingüística. Llame al 1‐877‐320‐1235 (TTY: 711). 繁體中文(Chinese):注意:如果您使用繁體中文,您可以免費獲得語言援助 服務。請致電 1‐877‐320‐1235 (TTY: 711)。 Kreyòl Ayisyen (Haitian Creole): ATANSION: Si w pale Kreyòl Ayisyen, gen sèvis èd pou lang ki disponib gratis pou ou. Rele 1‐877‐320‐1235 (TTY: 711). Polski (Polish): UWAGA: Jeżeli mówisz po polsku, możesz skorzystać z bezpłatnej pomocy językowej. Zadzwoń pod numer 1‐877‐320‐1235 (TTY: 711). 한국어 (Korean): 주의: 한국어를 사용하시는 경우, 언어 지원 서비스를 무료로 이용하실 수 있습니다. 1‐877‐320‐1235 (TTY: 711)번으로 전화해 주십시오. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
