If you install the password exit during installation, the installation program sets the QPWDVLDPGM system value to *REGFAC and installs a Validate Password exit program. If you want to publish password change information and if you currently use a Password Validation program, you must write a new one that can be registered for the QIBM_QSY_VLD_PASSWRD exit point.
We recommend that you use password level (i5/OS QPWDLVL system value) 2 or above. For details, see Section C.3.1, Password Levels.
You can use any security level (i5/OS QSECURITY system value) with the driver. IBM recommends security level 40.
Where are the objects that you plan to manage with the i5/OS driver currently stored?
Can you use a Matching policy to select the objects to manage based on criteria, such as department, group membership, or some other attribute?