Security Management Guide (G06.24+, H06.03+)

Guardian System Security
Security Management Guide—522283-008
2-13
Optional Security Features
password length. To use these features (password encryption and password minimum
length check) and to overcome this limitation, instead of setting the PASSWORD
program's ENCRYPTPASSWORD option, set the Safeguard subsystem's
PASSWORD-ENCRYPT attribute. This approach enable Safeguard to enforce the
minimum length for the password if the PASSWORD-MINIMUM-LENGTH attribute is
set.
MINPASSWORDLEN
MINPASSWORDLEN determines the minimum acceptable length for a password. For
example, if MINPASSWORDLEN is set to 4, all passwords must be four characters or
longer. The default, false (0), is to accept any length password. If the PASSWORD-
MINIMUM-LENGTH attribute is set in Safeguard, you need not set the BINDER option
MINPASSWORDLEN in the PASSWORD program. PASSWORD communicates with
Safeguard, and Safeguard enforces the minimum length for the password.
PROMPTPASSWORD
PROMPTPASSWORD, if set to true (1), causes PASSWORD not to accept any
parameters but to prompt for the old and new passwords. If PROMPTPASSWORD is
false (0), the new password must be supplied as an argument to PASSWORD, when it
is invoked as in previous RVUs. PROMPTPASSWORD has a default value of false (0).
If PASSWORD is running with a process access ID (PAID) of the super ID and the
PROMPTPASSWORD option is selected, it does not prompt for the old password
(unless you are trying to change the super ID's password). However, it prompts for a
user ID. This option allows the super ID to change another user's password without
knowing the old password and without logging on as that user. If
PROMPTPASSWORD is true (1), the syntax is:
If the alias of SUPER.SUPER enters 255,255 at the USERID: prompt, the
PASSWORD program prompts for the password of SUPER.SUPER in order to
continue with the password change. If instead, a carriage return and a line feed (CRLF)
is entered at this prompt, the PASSWORD program prompts for the password of the
alias of SUPER.SUPER.
PASSWORD
USER ID: group-id, user-id - only if the super ID
OLD PASSWORD: old-password
NEW PASSWORD: new-password