Re: Concurrent sessions disabled -- just out of morbid curiosity

1 - Security. Stop users from sharing user id's and passwords.
2 - Auditing. Outside auditors have a standard checkoff sheet that has
"suggestions" for various system values. They recommend this because of
reason 1. But with web ap's, odbc, etc it's not an as400 anymore, yet
they don't try to stop sharing of user id's through these venues. Probably
because it's not as easily done.
3 - software by session id. We told BPCS we use multiple sessions and we
are not going to stop and we are not going to pay multiple users for a
single user. We worked it out.

We allows multiple sessions and explained this to the auditors and they're
cool with it. Remember; it's a guideline, not a hard and fast rule.


Rob Berendt