Ref #2, Windows sends multiple requests for a single authentication, meaning one wrong password will show up in IBM i as multiple logon attempts.

-----Original Message-----
From: Steinmetz, Paul [mailto:PSteinmetz@xxxxxxxxxx]
Sent: Friday, July 11, 2014 1:53 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: [Bulk] Netserver profile being disable after IPL and/or password change - CPIB682


1) For second level text, do you mean this?
Cause . . . . . : User profile TPASKEIP exceeded the maximum number of
incorrect sign-on attempts when connecting to IBM i Support for Windows
Network Neighborhood (IBM i NetServer). This user profile has been disabled
for IBM i NetServer access. The latest failure was received from
workstation ::ffff: at IP address ::ffff:

2) Also, based on the message, the user exceeded the maximum number of attempts.
However, they only keyed their password once.
Does Netserver use sysval QMAXSIGN *SEC Maximum sign-on attempts allowed?
We are set to 3.


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mark S Waterbury
Sent: Friday, July 11, 2014 11:37 AM
To: Midrange Systems Technical Discussion
Subject: Re: [Bulk] Netserver profile being disable after IPL and/or password change - CPIB682


Look at the second-level text for that message CPIB682 for an explanation as to how or why those NetServer user IDs are getting disabled.


for a nice article and tool by Carsten Flensburg that addresses this issue.


Mark S. Waterbury

On 7/11/2014 10:18 AM, Steinmetz, Paul wrote:
I have a group of users that use mapped drives to the IFS.
Following an IPL, System save, restricted state and/or if user changes their password, their Netserver profile becomes disabled with a CPI8682.
Once the profile is re-enabled, every is fine, until next maint and/or password change.

Is this normal behavior, or can anything be done to avoid these nuisances?

Message ID . . . . . . : CPIB682
Date sent . . . . . . : 07/11/14 Time sent . . . . . . : 08:13:54

Message . . . . : User profile TPASKEIP disabled for IBM i Support for
Windows Network Neighborhood access.

Thank You
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home


This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at

This thread ...


Return to Archive home page | Return to MIDRANGE.COM home page