Re: User profile question

Pete Massiello wrote on 01/25/2006 09:45:10 AM:

>    If you make QSECOFR *Disabled, you won't be able to sign on anywhere.
>
>    I think when she is referring to signing on at the console, she is
talking
>    about
>    making the system value QLMTSECOFR set to a 1, and then only giving
>    explicit
>    authority to QCONSOLE and DSP01 so that you can sign on to either of
these
>    devices
>    with the QSECOFR user profile and then no others.

Sorry but this is not correct. According to the Security Reference manual
"You can always sign on at the console with the QSECOFR, QSRV, and QSRVBAS
profiles, no matter how the QLMTSECOFR value is set."

The QSECOFR user profile is allowed to sign on to the system console even
when the QSECOFR user profile is disabled. The only time I can think of
when QSECOFR will not be able to sign on to the console is when QSECOFR has
a long or complex password that will only work at password level 2 or 3 and
then the password level of the system is changed to 0 or 1.


Ed Fishel,
edfishel@xxxxxxxxxx