A little known security hole: If you allow adjacent digits, a user can set their password to all numbers. All they need to do is start the password with a Q followed by all numbers. The Q is dropped and the user has all numbers for the password. To eliminate this practice, add Q to system value QPWDLMTCHR.
Need more info on iSeries security? Check out our Security Topic resource page.