Set Block Password Change

VisokaNivo 2Ručni pregledibm-i

Opis

Specifies the time period during which a password is blocked from being changed following the prior successful password change operation. This system value does not restrict password changes made by the Change User Profile (CHGUSRPRF) command. By restricting the frequency of password changes, an administrator can prevent users from repeatedly changing their password in an attempt to circumvent password reuse controls.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run DSPSYSVAL SYSVAL(QPWDCHGBLK) (or WRKSYSVAL QPWDCHGBLK) and verify the value is "99". Remediate with: CHGSYSVAL SYSVAL(QPWDCHGBLK) VALUE('99')

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

To establish the recommended configuration, set the following system value to "99": QPWDCHGBLK CHGSYSVAL SYSVAL(QPWDCHGBLK) VALUE('99')

Svojstva

Operativni sistemi: Bilo koji
Oznake: ibm-ipassword-policy
Referenca: CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.1.2.17 Set Block Password Change