Re: User ID's Disabled

[Jeffry Kennedy <jkennedy@xxxxxxxxxxxxx>]

This is a multi-part message in MIME format.
--
I"m not doing any security auditing currently.

Gary Monnier wrote:

> Jeffry,
>
> Try finding the following type T journal entry codes in journal QAUDJRN with
> command DSPJRN - CP, CA, OM, OW, PA, PG, PS, PW,SV, VP, and VU.  If you have
> security auditing started you should find something.
>
> If you do not have security auditing started, start it.  Run command
> CHGSECAUD and set up auditing.  At the very least you will want to audit at
> level *SECURITY.  You may also want to change all user profiles to audit
> objects.  Again, at the very least *SECURITY auditing level should be
> started.
>
> If you're still having difficulty finding out what is going on we sell a
> product called SecurityAudit.  It will provide you with virtually any
> iSeries security related report you are looking for.  For more information
> go to our web site - www.powertechgroup.com.
>
> --
> Gary Monnier
> www.powertechgroup.com  gary.monnier@powertechgroup.com
> The Powertech Group, Inc.     Seattle, Washington
> Where the Security Experts Live!
>
> Phone: +1-253-872-7788
> Fax:     +1-253-872-7904
> --
>
> -----Original Message-----
> From: midrange-l-admin@midrange.com
> [mailto:midrange-l-admin@midrange.com]On Behalf Of Jeffry Kennedy
> Sent: Friday, July 19, 2002 7:07 AM
> To: AS/400 Questions
> Subject: User ID's Disabled
> Importance: High
>
> This is a multi-part message in MIME format.
> --
> I have a problem which appears to have started yesterday with user id's
> getting set to 'DISABLED'. It is not from sign on failures since some
> of  the user have never signed on (set up warehouse user's for future
> needs). The ID's for the warehouse RF users never require a password
> change and it even disabled some on my user ids. I set all of the users
> to 'ENABLE' yesterday and the user that weren't active were all set to
> 'DISABLE'.
>
> I ran ANZDFTPWD on Wednesday with the default action (*none).
>
> What is going on ???
> --
> Content-Description: Card for Jeffry Kennedy
>
> [ jkennedy.vcf of type text/x-vcard deleted ]
> --
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
--
Content-Description: Card for Jeffry Kennedy

[ jkennedy.vcf of type text/x-vcard deleted ]
--