Re: Rép. : Auditing, renaming, deleting IBM profiles

[Alan Shore <AlanShore@xxxxxxxx>]

Actually Denis Robitaille's remark of "You should change auditor" was
probably said tongue in cheek, but never a truer word said in jest.
Do these auditors know what repercussions would arise by making such a
suggestion?
I would seriously ask them what experience they have on the AS/400 - or
i-series they have.


Alan Shore

NBTY, Inc
(631) 244-2000 ext. 5019
AShore@xxxxxxxx
"If you're going through Hell, keep going" - Winston Churchill

midrange-l-bounces@xxxxxxxxxxxx wrote on 07/25/2007 10:46:20 AM:

> You should change auditor ;)
>
> I suggest you do the following (that should satisfy your auditor):
> - Change the password of those profiles for a random sequence of
> number/caracter
> - Disable the profiles that can be.
>
> A lot of system stuff run under some of those profiles. Renaming or
> delating them is a sure recipe for desaster.
>
> > > > <lgoodbar@xxxxxxxxxxxxxx> 2007-07-25 10:33 >>>
> Other than "common knowledge" that IBM user profiles should not be
> renamed or deleted, is there any official IBM documentation stating
> the
> fact? We have auditors who want to rename or delete QSECOFR, QUSER,
> QSRV, QSRVBAS, QPGMR, QSYSOPR, &c. I found and printed IBM's command
> help for DLTUSRPRF that restricts deleting those profiles, but have
> not
> seen anything on a rename.
>
>
>
> Thanks,
>
> Loyd
>
>
>
> Loyd Goodbar
>
> Senior programmer/analyst
>
> BorgWarner
>
> TS Water Valley
>
> 662-473-5713
>
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.