Re: MIDRANGE-L Digest, Vol 8, Issue 1650

[Jon Paris <jon.paris@xxxxxxxxxxxxxx>]

That was my best guess Walt - but it could certainly be handled more  
gracefully!

I'll at least report to IBM that it should work one way or the other -  
i.e. be happy with a 10 char Id or at least not disable it. At this  
point I don't mind which!


Jon Paris

www.Partner400.com
www.SystemiDeveloper.com



On 23-Sep-09, at 12:49 PM, midrange-l-request@xxxxxxxxxxxx wrote:

> Jon Paris wrote:
> > And so far I still have no idea why my User was disabled.
>
> This would be my guess:  When PASE_USRGRP_LIMITED=N is not set,  
> somewhere
> during the initiation of a new connection ssh ends up seeing a  
> mismatch
> between the > 8 character userid it was asked to create a session  
> for and
> the information returned by OS routines like geteuid, getpwuid,  
> etc.  With
> that mismatch, sshd concludes something funky is going on and bails  
> out on
> that connection attempt -- logging an invalid connection attempt  
> along the
> way.  Eventually those invalid attempts add up and disable the userid.
>
> --
> -----
> Walt Madden
> IBM i software development