Re: How to start DST without an IPL

[rob@xxxxxxxxx]

This is a multipart message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
Yes.  With V5R2, you get that stupid message when you run CHGDSTPWD.  Then
you have to start DST mode with function-21, to change the password.  The
message alludes that you can configure your system not to have to do this
but durned if I know how.

Rob Berendt
--
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
Benjamin Franklin




Vern Hamberg <vhamberg@centerfieldtechnology.com>
Sent by: midrange-l-admin@midrange.com
11/06/2002 10:05 AM
Please respond to midrange-l

        To:     midrange-l@midrange.com
        cc:
        Fax to:
        Subject:        Re: How to start DST without an IPL


Rob

Not in QCPFMSG, at least. This looks new. What I wonder is, what happens
if
you disable QSECOFR's service tools user ID? I've been in an environment
where many people had access to the QSECOFR service tools ID (not a
production shop, a lab). We often ran into the problem where we did not
remember whether the password was uppercase or lowercase, and then whoever
got wrong would use CHGDSTPWD and have to find one that had not been used,
then notify the rest of the team, etc.  yada yada yuk! So I've advocated
having individual service tools IDs for anyone who needs to get to DST,
and
that no one be given access to QSECOFR for this, except one primary
administrator.

But does v5r2 make this even more prone to this kind of confusion?

Vern

At 08:59 AM 11/6/2002 -0500, you wrote:
>This is a multipart message in MIME format.
>--
>[ Picked text/plain from multipart/alternative ]
>Does V5R1 have this message?  I don't have any machines with that old of
>an OS:
>
>CPF4AB7
>Message . . . . :   Service tools user ID password cannot be changed.
>Cause . . . . . :   Your system is configured to prevent a service tools
user
>   ID with a default and expired password from changing its own password.
>
>Recovery  . . . :   Either change the password of the service tools user
ID
>   through DST or use the Start Service Tools (STRSST) command, select
the
>   option to work with system security, and enable service tools user ID
> with a
>   default and expired password to change its own password. Try the
request
>   again.
>
>Rob Berendt
>--
>
>Vern Hamberg <vhamberg@centerfieldtechnology.com>
>
>         To:     midrange-l@midrange.com
>         cc:
>         Fax to:
>         Subject:        Re: How to start DST without an IPL
>
>
>On V5R1, anyway, if you use CHGDSTPWD and then go into DST (or SST), you
>need to change the password, and you cannot repeat a certain number (?)
of
>them.
>
>But once _in_ DST, you can change the password for any DST user to
>anything, even repeated ones.
>
>This is similar to the situation with CHGUSRPRF vs. CHGPWD - the former
>does not enforce the password rules, the latter does.
>
>But V5R2 may have changed some of this.
>
>Vern


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.