Re: AS/400 reseting users

[Al Barsa <barsa@xxxxxxxxxxxxxxxxxxx>]

Assuming that you have nothing "funny" going on, on your system (like a
rogue security officer disabling user profiles), it is probable that bad
password keying is the problem.

Several things to look at:

The system value QMAXSGNACN determines what to do when the user profile
keys too many bad passwords.  The default value is "3" which is to disable
the user profile and vary off the workstation.  "2" will just disable the
user profile.

The system value QMAXSIGN is the number of maximum sign on attempts with
bad passwords (or user profiles) until QMAXSGNACN is invoked.  The shipped
default is 3, which I think is too low, but there are too many security
gurus on this list that will argue that point.  (Please no flack, it's
Christmas week.)

Bad sign on attempts are logged to QHST, and to QSYSOPR.  Note that if the
message queue QSYSMSG exists in QSYS, the bad sign on attempts are not
logged to QSYSOPR, but only to QSYSMSG and QHST.

Hope this helps.

Al

Al Barsa, Jr.
Barsa Consulting Group, LLC

400>390

"i" comes before "p", "x" and "z"
e gads

Our system's had more names than Elizabeth Taylor!

914-251-1234
914-251-9406 fax

http://www.barsaconsulting.com
http://www.taatool.com
http://www.as400connection.com



                                                                           
             "Sérgio Daniel"                                               
             <sergio.daniel@we                                             
             b.de>                                                      To 
             Sent by:                  <MIDRANGE-L@xxxxxxxxxxxx>           
             midrange-l-bounce                                          cc 
             s@xxxxxxxxxxxx                                                
                                                                   Subject 
                                       AS/400 reseting users               
             12/21/2004 09:29                                              
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             Midrange Systems                                              
                 Technical                                                 
                Discussion                                                 
             <midrange-l@midra                                             
                 nge.com>                                                  
                                                                           
                                                                           




hi all,

my users are getting constantly disabled, and unable to log.

Where can I set a log to see what is going on?

thanks


Daniel

Mainz, Germany


--------------------------------------------------------------------------------



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.