RE: Changing passwords issue

["DeLong, Eric" <EDeLong@xxxxxxxxxxxxxxx>]

Mike, is something trying to access a share through the network with that
profile?  We've had users disable their accounts by trying to recconect
shared drives at startup with an old password.  I would assume that any such
action would be logged in the audit journal, tho.

Eric DeLong
Sally Beauty Company
MIS-Project Manager (BSG)
940-898-7863 or ext. 1863



-----Original Message-----
From: Mike Silvers [mailto:msilvers@xxxxxxxxxxx]
Sent: Tuesday, January 27, 2004 12:10 PM
To: Midrange Systems Technical Discussion
Subject: Re: Changing passwords issue


Ed,

This is really weird.  We had the audit values set as you mentioned in the
email.  I looked through the CP records.  There was nothing except the
entries for the profile being disabled when I tried to sign on.  Now,
another developer ran into the same problem.  I checked the journal entries
again and did not see anything related to the CP entries and his profile.  I
looked through all of the entries and I am not able to find anything
relating to either his or my user profile.

This has occurred with three different user profiles.

Do you have any other recommendations to audit changes to the user profiles?

Thanks

Mike

----- Original Message ----- 
From: "Ed Fishel" <edfishel@xxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, January 27, 2004 9:33 AM
Subject: Re: Changing passwords issue


>
> Mike Silvers wrote:
> >I am having a problem with a user profile. The password is
> >getting changed somewhere along the line. I need to determine
> >where the password is getting changed. I looked in the QHST
> >log, but I can not find any reference to the password being
> >changed. Does anyone have any ideas where I can look to
> >determine how/when the password was changed? Is there an
> >exit program that can record who changed and when passwords
> >were changed (or when a change was made to the user profile)?
>
> Take a look at the CP audit record in the QAUDJRN audit journal. The
> Password Changed field will be set to "Y" when the password was changed
for
> the user profile. To cause the CP audit record to be generated you will
> need to have *SECURITY specified in the QAUDLVL system value and *AUDLVL
> specified in the QAUDCTL system value. The Change Security Auditing
> (CHGSECAUD) command can be used to set both of these system value and
> create the audit journal if it does not exist.
>
> The CP audit record will also be written when the user profile is
restored.
>
> Ed Fishel,
> edfishel@xxxxxxxxxx
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.