Security Management Guide (G06.24+, H06.03+)

Guardian System Security
Security Management Guide—522283-008
2-12
Optional Security Features
These features available to the user in the PASSWORD program by setting the
BINDER option:
BLINDPASSWORD
BLINDPASSWORD determines if the user's response to the PASSWORD prompts is
echoed. The default, false (0), is to echo responses. When BLINDPASSWORD is set
to true (1), PASSWORD prompts the user to enter the new password twice. This
approach avoids some possible data-entry errors because the entered password is not
echoed. In order to invoke the BLINDPASSWORD option, the PROMPTPASSWORD
must also be selected. If PROMPTPASSWORD and BLINDPASSWORD are true (1),
the syntax of the PASSWORD command is:
ENCRYPTPASSWORD
ENCRYPTPASSWORD determines if any password entered is to be encrypted prior to
storage in the USERID file. The default, false (0), indicates no password encryption. If
the ENCRYPTPASSWORD option is enabled, the Safeguard subsystem does not
enforce the subsystem's PASSWORD-MINIMUM-LENGTH attribute. Because an
encrypted form of a password has eight characters, it passes the check for minimum
Note. The BINDER option is not supported on systems running G06.29 and later G-series
RVUs and H06.06 and later H-series RVUs.
BLINDPASSWORD MINPASSWORDLEN
ENCRYPTPASSWORD PROMPTPASSWORD
Note.
•
These options were not previously documented although they were available in the
PASSWORD program.
•
Be careful when setting the BINDER option. If options are set incorrectly, the PASSWORD
program might become inoperable.
•
By default, these options are disabled in the PASSWORD program.
•
If you install any subsequent version of the PASSWORD object, you must repeat the
BINDER changes described in Usage on page 2-14.
Note. These configuration attributes are available to the H-series users in the PWCONFIG
Utility on page 2-14. The PWCONFIG utility is supported only on systems running G06.29 and
later G-series RVUs and H06.06 and later H-series RVUs.
PASSWORD
USER ID: group-#, user-# - only if the super ID
OLD PASSWORD: old-password - not echoed
NEW PASSWORD: new-password - not echoed
RE-ENTER NEW PASSWORD: new-password - not echoed