Ref #2, Windows sends multiple requests for a single authentication, meaning one wrong password will show up in IBM i as multiple logon attempts.
-----Original Message-----
From: Steinmetz, Paul [mailto:PSteinmetz@xxxxxxxxxx]
Sent: Friday, July 11, 2014 1:53 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: [Bulk] Netserver profile being disable after IPL and/or password change - CPIB682
Mark,
1) For second level text, do you mean this?
Cause . . . . . : User profile TPASKEIP exceeded the maximum number of
incorrect sign-on attempts when connecting to IBM i Support for Windows
Network Neighborhood (IBM i NetServer). This user profile has been disabled
for IBM i NetServer access. The latest failure was received from
workstation ::ffff:10.5.47.54 at IP address ::ffff:10.5.47.54.
2) Also, based on the message, the user exceeded the maximum number of attempts.
However, they only keyed their password once.
Does Netserver use sysval QMAXSIGN *SEC Maximum sign-on attempts allowed?
We are set to 3.
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mark S Waterbury
Sent: Friday, July 11, 2014 11:37 AM
To: Midrange Systems Technical Discussion
Subject: Re: [Bulk] Netserver profile being disable after IPL and/or password change - CPIB682
Paul:
Look at the second-level text for that message CPIB682 for an explanation as to how or why those NetServer user IDs are getting disabled.
See:
http://iprodeveloper.com/rpg-programming/apis-example-list-and-enable-disabled-netserver-users
for a nice article and tool by Carsten Flensburg that addresses this issue.
HTH,
Mark S. Waterbury
On 7/11/2014 10:18 AM, Steinmetz, Paul wrote:
I have a group of users that use mapped drives to the IFS.
Following an IPL, System save, restricted state and/or if user changes their password, their Netserver profile becomes disabled with a CPI8682.
Once the profile is re-enabled, every is fine, until next maint and/or password change.
Is this normal behavior, or can anything be done to avoid these nuisances?
Message ID . . . . . . : CPIB682
Date sent . . . . . . : 07/11/14 Time sent . . . . . . : 08:13:54
Message . . . . : User profile TPASKEIP disabled for IBM i Support for
Windows Network Neighborhood access.
Thank You
_____
Paul Steinmetz
IBM i Systems Administrator
Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071
610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home
psteinmetz@xxxxxxxxxx
http://www.pencor.com/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
midrange.com
