MGO
OS/400 Edition
Volume 2, Number 69 -- September 11, 2002

   In This Issue

You Have Questions. The Gurus at Guild Companies Have Answers.

Sponsored By
WORTH CONSULTING

Pop-Up Windows Made Easy

This iSeries tool lets you easily add pop-up selection windows to your legacy programs.

Super/Windows reduces future program changes, eliminates code validation routines, and gives your users windows to select from valid values.

Existing RPG, COBOL, and CL programs need few changes, with NO changes to display files. Programs are automatically generated to use your current code or table files.

Download Free Trial

Sponsored By
WORKSRIGHT SOFTWARE

Your #1 Source for AS/400 ZIP and Area Code Software

Do you need to quickly locate your nearest dealer when a customer calls?

Our ZIP/CITY system has a dealer locator function to help you. ZIP/CITY includes city names, state and area codes, time zones and lat/lon for every ZIP code in the U.S.

For more information or a 30-day free trial, visit www.worksright.com, or call 601-856-8337.



Excuse Me...Can You Hold this Secondary Partition While I Upgrade the Primary?

Hey, Joe:

I have an iSeries box with two logical partitions (LPARs) running OS/400 V4R5. Our shop needs to upgrade the primary partition to OS/400 V5R1, and we want to put the secondary partition on hold while the upgrade is occurring (we don't want the secondary to IPL every time we have to IPL the primary). How do I shut down the secondary partition and keep it down while I'm doing the upgrade?

-- Ralph

READ MORE >

Adding Subprocedures to a Service Program, Revisited

Hey, Ted:

Regarding your article, "Adding Subprocedures to a Service Program," there's a question I've always wondered about. Why is the *CURRENT/*PRV way of handling new exports so popular compared to the hard-coded signature method, where you only keep one export list, as shown in my example. You have to keep the exports in the same order and add news ones at the end anyway, so I don't see the advantage of using *PRV signatures.

-- Barbara Morris, RPG Compiler Development, IBM

READ MORE >



Reader Feedback and Insights: Security Flaws

The Validating a User Password sample program in the August 21 issue of Midrange Guru, OS/400 Edition, has some basic security flaws. As you said, the Check Password (CHKPWD) command can produce any of three messages (CPF2362, CPF2363, and CPF2364). The problem is that the program only monitors for one of those messages. The program works correctly for the CPF2362 message but it fails for the other two. When it gets either of these two error messages (because the user has intentionally given a bad password several times in a row) the program will function check and then end. This will allow any user to get at the function you were trying to protect with the password.

-- Ed Fishel

READ MORE >

Subscription Information: To unsubscribe, change your email address, or sign up for any of Guild Companies' free e-newsletters, visit http://www.itjungle.com/sub/subscribe.html

This page is best viewed at 800x600 with Netscape or IE browsers 4 or higher.

THIS ISSUE
SPONSORED BY:

Worth Consulting
WorksRight Software


BACK ISSUES

TABLE OF CONTENTS

Excuse Me...Can You Hold this Secondary Partition While I Upgrade the Primary?

Adding Subprocedures to a Service Program, Revisited

Reader Feedback and Insights: Security Flaws




Editors
Howard Arner
Joe Hertvik
Ted Holt
David Morris

Managing Editor
Mari Barrett

Publisher and
Advertising Director

Jenny Thomas

Contact the Editors
Do you have a gripe, inside dope or an opinion?
Email the editors:
editors@itjungle.com



Last Updated: 9/11/02
Copyright © 1996-2008 Guild Companies, Inc. All Rights Reserved.