RE: How SST user was disabled?

That was their initial response. They sent the issue to a different team, and I waiting for an answer.

-----Original Message-----
From: Rob Berendt [mailto:rob@xxxxxxxxx]
Sent: Wednesday, May 03, 2017 9:23 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: How SST user was disabled?

By this comment:
<snip>
They are logged only for sign-on to the OS itself.
</snip>
I suspect they are not aware that it logs for failures when trying STRSST.
Push back. Or at least ask them about that.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Justin Taylor <JUSTIN@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 05/03/2017 10:20 AM
Subject: RE: How SST user was disabled?
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Well Vern, it appears that IBM agrees with you. Here's what they sent me:

there are no entries logged from *AUTFAIL in QUADJRN for failed sign-on
attempts to the console. They are logged only for sign-on to the OS
itself.


From: Justin Taylor
Sent: Tuesday, May 02, 2017 7:00 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: How SST user was disabled?


It's a service tools user, so (AFAIK) the OS has to do the authentication.
If I do the same thing in a 5250 STRSST, it gets logged.



________________________________
From: Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx<
mailto:vhamberg@xxxxxxxxxxxxxxx>>
Sent: Tuesday, May 2, 2017 5:07 PM
To: Midrange Systems Technical Discussion
Subject: Re: How SST user was disabled?

That makes sense, right? The console is not running on the OS, IIRC, so
the audit log is not in play, so far as I can tell.

Someone please verify - it's been forever since I played in that world.

Vern