RE: NetServer

Rob, I did happen to go to the second level of those messages and below is what I found:

Message ID . . . . . . : CPC1125 Severity . . . . . . . : 50
Date sent . . . . . . : 06/30/16 Time sent . . . . . . : 15:32:33
Message type . . . . . : Completion

From . . . . . . . . . : QSECOFR CCSID . . . . . . . . : 65535

From job . . . . . . . . . . . : QZRCSRVS

User . . . . . . . . . . . . : QUSER
Number . . . . . . . . . . . : 529356

From program . . . . . . . . . : QWTCCCNJ

Time sent . . . . . . . . . . : 15:32:33.662013


The message where I see the netserver being ended is as such:

Message ID . . . . . . : CPIB681
Date sent . . . . . . : 06/30/16 Time sent . . . . . . : 15:32:34

Message . . . . : i5/OS Support for Windows Network Neighborhood (i5/OS
NetServer) QACSD400 ended.

Message ID . . . . . . : CPIB681 Severity . . . . . . . : 00
Date sent . . . . . . : 06/30/16 Time sent . . . . . . : 15:32:34
Message type . . . . . : Information

From . . . . . . . . . : QPGMR CCSID . . . . . . . . : 65535

From job . . . . . . . . . . . : QZLSSERVER

User . . . . . . . . . . . . : QPGMR
Number . . . . . . . . . . . : 168511

From program . . . . . . . . . : QZLSSERVER

Time sent . . . . . . . . . . : 15:32:34.128120

The QPGMR job QZLSSERVER is the program used to end that job, which had to be initiated by another job/user, which all indicate it was QSECOFR.




-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Wednesday, July 06, 2016 10:03 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: NetServer

If you hit F1 on one of those messages, and then hit F9 for message details, you will see the actual job which issued the command.

SCNMSGF FILE(QCPFMSG) /* Utility used to find the message id not supplied in the OP */ DSPLOG PERIOD((*AVAIL *BEGIN)) MSGID(CPC1125 CPC1126) Job 038006/MIMIXOWN/MGR_ACCT was ended by user MIMIXOWN.
Job 038031/MIMIXOWN/MGR_ACCT was ended by user MIMIXOWN.
Job 038014/MIMIXOWN/MGR_ACCT@R was ended by user MIMIXOWN.
Job 037712/QYPSJSVR/QYPSJSVR was ended by user MIMIXOWN.
Job 039108/QSPLJOB/EMLPDFPAY was ended by user QSPLJOB.
Job 039115/QSPLJOB/PRTPDF was ended by user QSPLJOB.
Job 039107/QSPLJOB/EMLPDF was ended by user QSPLJOB.
Job 045323/KEVINR/ERPMRP was ended by user DARREN.
Job 045631/KEVINR/ERPMRP was ended by user DARREN.
Job 046554/KEVINR/ERPMRP was ended by user DARREN.
Job 061551/TROYM/PAYROLLGL was ended by user TROYM.
...
f1
F9=Display message details

From job . . . . . . . . . . . : GDL177B1

User . . . . . . . . . . . . : TROYM
Number . . . . . . . . . . . : 067648

This may help us to determine if it was a regular workstation interactive job, or some utility job such as http://youribmi:2001 and someone using the option to end netserver.

I ended net server yesterday on one lpar.
Job 604290/QPGMR/QZLSSERVER was ended by user QSECOFR.
Job 604332/QUSER/QZLSFILET was ended by user QSECOFR.
Job 604760/QUSER/QZLSFILE was ended by user QSECOFR.
Job 604762/QUSER/QZLSFILE was ended by user QSECOFR.

From job . . . . . . . . . . . : QZRCSRVS

User . . . . . . . . . . . . : QUSER
Number . . . . . . . . . . . : 604411
So, apparently the tool I used runs under QUSER but somehow adopts QSECOFR and ends those jobs. Without changing the signon date for QSECOFR
Previous sign-on . . . . . . . . . . . . . : 07/02/16 19:31:29
Last used date has been updated to today.



Rob Berendt