Password system values: Password validation program

The Password validation program system value is also known as QPWDVLDPGM. It specifies whether a user-written program does additional validation on passwords. This system value is not available in IBM® Navigator for i.

Quick reference
Location Character-based interface.
Special Authority All object (*ALLOBJ) and security administrator (*SECADM).
Changes take effect The next time a password is changed.
Lockable Yes.
Lockable system value
(See Lock function of security-related system values for details.)

What can I do with this system value?

This system value provides the ability for a user-written program to do additional validation on passwords. The current and new passwords are passed to the validation program without encryption. The validation program could store passwords in a database file and compromise security on the system. The recommended setting for this system value is *NONE.

You can specify the following options:

*NONE
No validation program is used.
*REGFAC
The validation program name is retrieved from the registration facility.
program-specification
The name of the validation program. This option is only valid if the system is operating at QPWDLVL 0 or 1. These are the possible library values:
*LIBL
The library list is used to locate the validation program.
*CURLIB
The current library for the job is used to locate the validation program. If no library is specified as the current library for the job, QGPL is used.
library-name
Specify the name of the library where the validation program is located.

The program must exist in the system disk pool (also known as auxiliary storage pool) or in a basic user disk pool.