Re: New 520 - Does the OS come pre-installed?

i wholeheartedly agree. first thing i do on a new install is set up
DST/SST profiles for specific users that need that access. the only ones
that should be using the QSECOFR SST/DST ID is IBM IMO...i love
acronyms...lol


Thanks,
Tommy Holden



From: Vern Hamberg <vhamberg@xxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 10/30/2009 10:23 AM
Subject: Re: New 520 - Does the OS come pre-installed?
Sent by: midrange-l-bounces@xxxxxxxxxxxx



As to DST passwords - I strongly, urgently recommend that you give
anyone who needs access to DST/SST their own DST user and password. No
one should use QSECOFR in that world except when the machine is first
set up. The situation Aaron ran into is exactly why - it is far too easy
to disable QSECOFR when logging in to DST or SST. QSRV (spelling?) and a
couple other ones should be basically disabled, and if needed by a
service person, go in there with enough authority and open those up
while needed.

JMHO
Vern

Grizzly Malchow wrote:

Good to know. When I first started working here I had never done any

sort of sys admin stuff, therefore I had never used DST. I remember trying
to log in to DST and I didn't know the password. I tried using qsecofr's
password and using QSECOFR as the password. Neither would work. I
eventually tried password as the password and I was able to login. Hence
my thinking that it was the default. Why someone would change the DST
password to password boggles the mind. I don't know if it's better or
worse than leaving it as QSECOFR.

I'm no security guru, but I like a nice cryptic password. The first

thing I did after logging in was change the password.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [

mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Tommy.Holden@xxxxxxxxxxxxxxxxxxxxx

Sent: Friday, October 30, 2009 8:51 AM
To: Midrange Systems Technical Discussion
Subject: RE: New 520 - Does the OS come pre-installed?

nope...the default is QSECOFR.


Thanks,
Tommy Holden



From: Grizzly Malchow <grizzlym@xxxxxxxxxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 10/30/2009 08:43 AM
Subject: RE: New 520 - Does the OS come pre-installed?
Sent by: midrange-l-bounces@xxxxxxxxxxxx



I could be wrong but is the default password for DST just 'password'?

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Aaron Bartell
Sent: Friday, October 30, 2009 7:45 AM
To: Midrange Systems Technical Discussion
Subject: Re: New 520 - Does the OS come pre-installed?

I am now in section "Initial IBM i OS configuration" (
http://wiki.midrange.com/index.php/GettingStarted).

Upon first logging in with QSECOFR/QSECOFR it requires you to change the
QSECOFR password. No issue, I did that and proceeded to the next step

of

putting the system into manual mode, was prompted by the DST logon

prompt,

and I entered QSECOFR and the *new* password. Well, it didn't take the
new
password, so I tried QSECOFR as the password - no go. And now it is
telling
me "Id disabled" when I try to log in. When I do an F1 on that message

to

get more info it just takes me to the help for the screen, so I don't

even

have a message id to do a search on to see how to resolve the issue.

This

is the only page I could find, but it requires that I am able to log in

to

DST to enable a DST profile - thanks IBM:

http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzamh/rzamhenabledevidsdst.htm

Help.

Aaron Bartell
http://mowyourlawn.com