RE: 27,538 Sign-on attempts not valid

   VIOLATION USER       USER       DEVICE
REMOTE   LOCAL    NETWORK  JOB        JOB  
   TYPE      PROFILE    NAME       NAME
NAME     NAME     ID       NAME       USER 
 PW    P     QTCP       ELOYV      Communications Device
QTVDEVICE  QTCP 
 PW    P     QTCP       ELOYV      Communications Device
QTVDEVICE  QTCP 
 PW    P     QTCP       ELOYV      Communications Device
QTVDEVICE  QTCP 

-----Original Message-----
From: rob@xxxxxxxxx [mailto:rob@xxxxxxxxx]
Sent: Friday, December 19, 2003 10:46 AM
To: Midrange Systems Technical Discussion
Subject: Re: 27,538 Sign-on attempts not valid


Is there any chance that the QAUDJRNE shows what program and/or job was 
creating these entries?

Rob Berendt
-- 
"All creatures will make merry... under pain of death."
-Ming the Merciless (Flash Gordon)




"Burns, Bryan" <burnsbm@xxxxxxxxxxxxxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
12/19/2003 10:42 AM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
MIDRANGE-L@xxxxxxxxxxxx
cc

Fax to

Subject
27,538 Sign-on attempts not valid






This morning user profile ELOYV showed a status of disabled and 27,538
invalid sign-on attempts.  I changed the password for the profile 
yesterday
at 14:36:24 and QSYSWRK disabled the profile at 14:40:09.

QAUDJRNE shows PW entries every two seconds from 14:40:00 yesterday to
7:10:17 this morning.  I enabled the profile at 07:19 this morning and 
went
over to the work station, a production floor PC.  The work station runs
W2000 and CAE V4R5.  There was a window on the workstation indicating 
ELOYV
was disabled.  I entered the correct password and signed on.

I originally thought there must have been a macro running but now I think
it's a software bug.  Any thoughts on what caused all these sign-on
attempts?