Security-related Exit Programs

You may write exit programs that are called by the operating system to perform user-profile-related functions that suit your needs. With the use of these exit programs, the user-profile exit points notify you when a user profile has been created, changed, and so forth. For example, if you are maintaining a network of systems and you want to keep the user profile changes synchronized on all the systems, you can use these exit points to be notified of all the create, change, and delete profile activity. When a user profile is created on one system and you receive notification of that user profile being created, you can retrieve all the user profile information and create a duplicate user profile on the other systems in your network. The same can be done for any user profile changes and deletions.

For general information abou the i5/OS^(TM) system security, see the iSeries Security Reference book.

The i5/OS security-related exit programs are:

• Change User Profile is called when a user profile has been changed on the iSeries.
• Check Password (QIBM_QSY_CHK_PASSWRD) is called when a command or the QSYCHGPW API is used to set or change the password associated with a user profile. 
• Create User Profile is called when a user profile is created on the iSeries.
• Delete User Profile is called when a user profile is deleted on the iSeries.
• Restore User Profile is called when a user profile is restored on the iSeries.
• Validate Password is called when a Change Password (CHGPWD) command or Change Password (QSYCHGPW) API is executed.

Note: The QIBM_QSY_HOSTFUNC, QIBM_QSY_OPNAVCENTRL, QIBM_QSY_OPNAVCLIENT, QIBM_QSY_OTHERCENTRL, and QIBM_QSY_OTHERCLIENT exit points are used only to store function registration information (see the Register Function (QSYRGFN, QsyRegisterFunction) API). The exit programs within these exit points are never called, so the formats associated with these exit points (FCNR0100 and FCNR0200) are never used or documented.