On Thu, 12 Jun 2025 06:39:31 -0400, Robert S. Hansel 
<[email protected]> wrote:
>As others have pointed out, Started Task IDs with passwords could be become 
>revoked 

This is not limited to STCUSER. E.g. job schedulers.

Revoked is not the only security issue. E.g. at least one person knows this 
password on a userid that can't be disabled. Chances are if it's a group 
userid, then the group may know the password.

Best practices dictate that passwords only be provided when a userid will be 
used by a specific person and that person needs a password for that userid.  
All other userids should never have a password. You don't want people ignoring 
security because it's inconvenient.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to