RE: IBM i Password reset tool

PS-- we also have a file of profiles to never disable that we match against the DSPUSRPRF output file.


Paul E Musselman
PaulMmn@xxxxxxxxxxxxx

-----Original Message-----
From: Musselman, Paul
Sent: Friday, June 22, 2018 4:05 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: IBM i Password reset tool

Set QMAXSGNACN to 3 - Disable Device and Profile??

Or do you want the profile (or a specific profile) re-activated?

We have several scheduled jobs for passwords:

- change any profile that has never signed on to PASSWORD(*NONE)
- change any profile not used in 180 days to PASSWORD(*NONE)
- change profiles with passwords older than 60 days and not used will be DISABLED
- for selected shop floor accounts that get disabled, re-enable them automatically.

Most of these are based on DSPUSRPRF to an outfile, then reading that file (in a CLP) and doing appropriate things.

Paul E Musselman
PaulMmn@xxxxxxxxxxxxx

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Friday, June 22, 2018 3:53 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: RE: IBM i Password reset tool

Monitor for CPF1397

Cause . . . . . : The maximum number of sign on attempts specified by system
value QMAXSIGN has been reached. The device has been varied off for
security reasons.

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Musselman, Paul
Sent: Friday, June 22, 2018 3:39 PM
To: Midrange Systems Technical Discussion
Subject: RE: IBM i Password reset tool

Reset how? Automatically assign a new password after so many days? We just set the Password Expiration Interval. There are a few profiles, like QSECOFR, that don't reset ever...

Paul E Musselman
PaulMmn@xxxxxxxxxxxxx

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Friday, June 22, 2018 3:31 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: IBM i Password reset tool

Anyone in the group using a tool that will reset an IBM I passwords, either automatically or based on some other criteria?

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/