Re: User ID's Disabled

[Glenn Ericson <Glenn-Ericson@xxxxxxx>]

--
[ Picked text/plain from multipart/alternative ]
Jeffry ,
as a  diagnostic, it would not hurt to turn  auditing Jrn on. Then setup
some ID/PWs again and see who or what is  eating your profile passwords up.
                 Glenn

Jeffry Kennedy wrote:

>--
>I"m not doing any security auditing currently.
>
>Gary Monnier wrote:
>
> > Jeffry,
> >
> > Try finding the following type T journal entry codes in journal QAUDJRN
> with
> > command DSPJRN - CP, CA, OM, OW, PA, PG, PS, PW,SV, VP, and VU.  If you
> have
> > security auditing started you should find something.
> >
> > If you do not have security auditing started, start it.  Run command
> > CHGSECAUD and set up auditing.  At the very least you will want to audit at
> > level *SECURITY.  You may also want to change all user profiles to audit
> > objects.  Again, at the very least *SECURITY auditing level should be
> > started.
> >
> > If you're still having difficulty finding out what is going on we sell a
> > product called SecurityAudit.  It will provide you with virtually any
> > iSeries security related report you are looking for.  For more information
> > go to our web site - www.powertechgroup.com.
> >
> > --
> > Gary Monnier
> > www.powertechgroup.com gary.monnier@powertechgroup.com
> > The Powertech Group, Inc.     Seattle, Washington
> > Where the Security Experts Live!
> >
> > Phone: +1-253-872-7788
> > Fax:     +1-253-872-7904
> > --
> >
> > -----Original Message-----
> > From: midrange-l-admin@midrange.com
> > [mailto:midrange-l-admin@midrange.com]On Behalf Of Jeffry Kennedy
> > Sent: Friday, July 19, 2002 7:07 AM
> > To: AS/400 Questions
> > Subject: User ID's Disabled
> > Importance: High
> >
> > This is a multi-part message in MIME format.
> > --
> > I have a problem which appears to have started yesterday with user id's
> > getting set to 'DISABLED'. It is not from sign on failures since some
> > of  the user have never signed on (set up warehouse user's for future
> > needs). The ID's for the warehouse RF users never require a password
> > change and it even disabled some on my user ids. I set all of the users
> > to 'ENABLE' yesterday and the user that weren't active were all set to
> > 'DISABLE'.
> >
> > I ran ANZDFTPWD on Wednesday with the default action (*none).
> >
> > What is going on ???
> > --
> > Content-Description: Card for Jeffry Kennedy
> >
> > [ jkennedy.vcf of type text/x-vcard deleted ]
> > --
> >
> > _______________________________________________
--