2009/5/8 Paul Gilmartin <paulgboul...@aim.com>:

> Sigh.  If IBM users were serious about this sort of thing, they'd
> submit a Requirement that LOGON not distinguish between invalid
> user ID and valid user ID with invalid password, reducing the
> exhaustive search space from M*N to M+N.

That requirement would have to go against the various products that
issue SAF calls. There is nothing to stop any product that does logons
from being as vague as it likes about why the user can't log on.

Tony H.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to