RE: New Machine, QSECOFR not authorized

Joe,

        On a new box, QSECOFR is normally not authorized to the system console.
See:
3.1.8 Limit Security Officer (QLMTSECOFR)

The QLMTSECOFR system value controls whether a user with all-object
(*ALLOBJ) or service (*SERVICE) special authority can sign on to any
workstation. Limiting powerful user profiles to certain well-controlled
workstations provides security protection.
The QLMTSECOFR system value is only enforced at security level 30 and
higher. "Security and Workstations" in topic 6.2 provides more information
about the authority required to sign on at a workstation.

You can always sign on at the system console with the QSECOFR, QSRV, and
QSRVBAS profiles, no matter how the QLMTSECOFR value is set.

this is out of the OS/400 Security reference.

I would recommend
http://publib.boulder.ibm.com/html/as400/v4r5/ic2924/index.htm
to start a new system.

        Alex
BTW if all you have is a console, you IPL if you vary it off.
-

I just plugged in a brand new machine, a model 270.  I connected the coax
connector and the power plug, and turned the machine on.  I have a 3489
Infowindow II attached to Port 0, and it comes up as "DSP01" in QBASE.  So,
I figure everything is cool.

I log on as QSECOFR/QSECOFR, and I get CPF1110 Not Authorized to
Workstation!  How can this be?  I tried QSYSOPR and QSECADM, neither of
which would log on, and now I'm at the dreaded CPF1116 Next Unsuccessful
Attempt Varies Off Device.

I am in a quandary.  How do you initially make DSP01 available to sign on as
QSECOFR?  There aren't a whole lot of manuals, but I do have the InfoCenter
disks - is the information there?  Do I have to go through a special signon?
(I seem to recall there was a special service signon - is that what I have
to do?  And if so, how do I do it?)

As a second question, what do you do if you DO manage to vary off DSP01?
How do you get it back?

Any help greatly appreciated.

Joe

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---