Re: Audit Journal Entry

["Angus MacQueen" <amacqueen@xxxxxxxxx>]

Ken, thanks for the prompt reply.

Reading your response would I be correct in interpreting it to mean the user
had to change their password at the 'GUI' log on for Client Access.

Tx

Angus

On 01/03/07, Holder, Ken <kkh@xxxxxxxxxxxxx> wrote:
> Angus,
>
> The ones I see most often are Client Access type connections which are
> connected as QUSER prior to users authentication.  The user FERNJ might have
> been attempting to changed their password or didn't type it in correctly and
> it was disabled.  It was QUSER that did the change password or disabled the
> profile.
>
> Look at your audit journals directly using DSPAUDJRNE ENTTYP(CP) and you
> should see more detail on what was actually changed for the user profile
> FERNJ.
>
> Ken H.
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Angus MacQueen
> Sent: Thursday, March 01, 2007 7:30 AM
> To: midrange-l@xxxxxxxxxxxx
> Subject: Audit Journal Entry
>
>
> Can anyone explain the circumstances where the QUSER profile might be
> responsible for changing a USRPRF?
>
> We have a piece of software that monitors the audit journal and if
> necessary
> logs an alert by email, sms, and/or to a console and I want to consider
> whether to exclude this alert if the profile is QUSER.
>
> This is an example of the alert I get:-
>
> Event message . . . . . :  CP - User Profile FERNJ changed by QUSER.
>
> User profile  . . . . . :  FERNJ
> Job . . . . . . . . . . :  687789/QUSER/QZSOSIGN
>
> TIA
>
>
> Angus
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.