> It seems to me that it > should be made an option rather than having someone (me) read and > decipher the note in the program directory and then ignore it. Leaving > the exit in place rather than using RACF's DES encryption means that if > you use your existing DES encrypted database, no existing passwords work.
The exit should NOT be the default if it cannot detect that the database is inaccessible to it. Either it should be disabled in favor of the built-in DES code, or modified to report that it can't handle the database and have you convert the data or disable the exit. > I'd be interested in a show of hands to find out if others prefer to and > do roll your own for database password encryption vs. using RACF's DES > code. I told the RACF developer that I'd let him know what I found. Use the built-in unless you have a very good reason to do otherwise.