67 lines
4.1 KiB
HTML
67 lines
4.1 KiB
HTML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
||
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="dc.language" scheme="rfc1766" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<meta name="dc.date" scheme="iso8601" content="2005-09-13" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow"/>
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<title>Password considerations</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="ic.css" />
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
|
||
|
|
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
|
||
|
|
|
||
|
|
<a name="rzahqpasswdconsids"></a>
|
||
|
|
<h3 id="rzahqpasswdconsids">Password considerations</h3>
|
||
|
|
<ol type="1">
|
||
|
|
<li><img src="delta.gif" alt="Start of change" />Make sure that the i5/OS™ QRETSVRSEC system is set to 1. You can
|
||
|
|
do this with the Work with System Values (WRKSYSVAL) command. If you do not
|
||
|
|
do this, you will be unable to enroll users on your integrated Windows server
|
||
|
|
until they sign on to i5/OS.
|
||
|
|
<a name="wq37"></a>
|
||
|
|
<div class="notetitle" id="wq37">Note:</div>
|
||
|
|
<div class="notebody">This system value is also required
|
||
|
|
for iSCSI integrated server support.</div><img src="deltaend.gif" alt="End of change" /></li>
|
||
|
|
<li>The user should use i5/OS passwords containing only characters and password
|
||
|
|
lengths allowed in Windows passwords if they want to enroll users. The password
|
||
|
|
level of i5/OS can be set to allow for user profile passwords of 1 - 10 characters
|
||
|
|
or to allow for user profile passwords of 1 - 128 characters. An i5/OS password level
|
||
|
|
change of the system value QPWDLVL requires an IPL.</li>
|
||
|
|
<li>The i5/OS password level of 0 or 1 supports passwords of 1 - 10 characters
|
||
|
|
and limits the set of characters. At password level 0 or 1, i5/OS converts passwords
|
||
|
|
to all lowercase for Windows.</li>
|
||
|
|
<li>The i5/OS password level of 2 or 3 supports passwords of 1 - 128 characters
|
||
|
|
and allows more characters including uppercase and lowercase characters. At
|
||
|
|
level 2 or 3, i5/OS preserves password case sensitivity for Windows.</li>
|
||
|
|
<li>When the i5/OS passwords of enrolled users expire, their Windows passwords also
|
||
|
|
expire. Users can change their passwords on Windows, but they must remember
|
||
|
|
to also change their passwords on i5/OS. Changing the i5/OS password first automatically changes
|
||
|
|
the Windows password.</li>
|
||
|
|
<li>If the i5/OS system value QSECURITY is 10, the Windows users that are created
|
||
|
|
do not require passwords to sign-on. All other i5/OS QSECURITY levels require that a user
|
||
|
|
object have a password to sign-on. You can find more information about security
|
||
|
|
levels in the <a href="../books/sc415302.pdf" target="_blank">iSeries™ Security
|
||
|
|
Reference</a>
|
||
|
|
<img src="wbpdf.gif" alt="Link to PDF." />.</li>
|
||
|
|
<li>If you are using a language other than English, be aware that using anything
|
||
|
|
but invariant characters in user profiles and passwords can cause unpredictable
|
||
|
|
results. The <a href="../nls/rbagsglobalmain.htm">Globalization</a> topic contains information
|
||
|
|
about what characters are in the invariant character set. This statement is
|
||
|
|
only true when QPWDLVL is 0 or 1. When QPWDLVL is 2 or 3, invariant characters
|
||
|
|
can be used without causing any problems.</li></ol>
|
||
|
|
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
|
||
|
|
</body>
|
||
|
|
</html>
|