Local password management

The Local password management ( LCLPWDMGT) parameter controls whether the user profile password is managed locally. When the password is not management locally, users cannot access the system by direct sign-on, but through other platforms.

If the password is managed locally, then the password is stored locally with the user profile. This is the traditional method of storing the password.
Add User prompt:
Not shown
CL parameter:
LCLPWDMGT
Length:
10
If the password is not being managed locally, then the local IBM® i password is set to *NONE. The password value specified in the password parameter will be sent to other IBM products that do password synchronization, such as IBM i Integration for Windows Server. Users will not be able to change their passwords using the Change Password (CHGPWD) command. In addition, users will not be able to sign on to the system directly. Specifying this value will affect other IBM products that do password synchronization, such as IBM i Integration for Windows Server.

This parameter should not be set to *NO unless the user only needs to access the system through some other platform, such as Windows Server.

Table 1. Possible values for LCLPWDMGT:
*YES The password is managed locally.
*NO The password is not managed locally.