Re: Disabled profile

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

Can you look at the audit journals again but instead of security look for
changes to the user profile object.  We had a recent thread on this.  The
person was able to nail down the job, program, and IP address.

On Sun, Jan 22, 2023 at 5:44 PM Don Brown via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

> I am trying to investigate how a profile became disabled.
>
> This is a 7.3 system and the audit journal does not include *SECURITY
>
> In the history log I can see the profile became disabled at 00:16:58 on
> Saturday morning.
>
> Thee were no log entries for invalid password (CPF2234).
>
> There is noting related in the system operator message queue.
>
> This is the first time this has happened.
>
> The profile that was disabled is only used for database access from a
> Linux system running PHP and accessing the IBMi database
>
> The system is using the iACS ODBC driver to connect. Would there be logs
> on the Linux box ?
>
> Any suggestions appreciated.
>
> Thanks
>
> Don
>
>
>
>
> --
> This email has been scanned for computer viruses. Although MSD has taken
> reasonable precautions to ensure no viruses are present in this email, MSD
> cannot accept responsibility for any loss or damage arising from the use of
> this email or attachments..
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.