Security Level 30 to 40 failure on STRPASTHR

["Steve Glanstein" <mic@xxxxxxxxx>]

There could be several reasons why passthru stops w.r.t. a level 30-40
upgrade.  Most of them are unrelated to the actual upgrade to level 40. 
Here's a list:

1.  Direct function of 30-40 upgrade

        Job description that specifies a particular user profile and the
requesting profile does not have at least *USE authority to the profile.
(user id = a name rather than *RQD)

        Workstation entry in the subsystem that uses a job description above or
specifies a specific user profile for signon.

2.  Not related to 30-40 upgrade.

        QLMTSECOFR set.  Try passing through from other user profiles and make
sure you check this system value..

        QUSER disabled and an attempt to passthru with user profile and password
NOT specified on the STRPASTHR command.

        Another user profile specified in the communications subsystem (ADDCMNE,
RMVCMNE) that is disabled and the same STRPASTHR.

        Insufficient authority to the APPC device. (Must be *CHANGE)

        Insufficient authority to a selected virtual terminal. (Must be *CHANGE)

        Insufficient authority to any of the items in the user profile needed 
for
a successful signon, e.g. job description, library list, initial program,
message queue, et al.

If you have set up an audit journal AND enabled it properly (You HAVE SETUP
AN AUDIT JOURNAL, right!) then check for authority failures or other
entries.

Hope this helps.....

steve


>Date: Mon, 15 Dec 1997 18:11:09 -0500
>From: "Bruce Odum" <bodum@magicnet.net>
>Subject: Re: Level 40 security from level 30

>This is a brand new system we are in the process of setting up.  I dont
>think we have changed QSYS or QUSRSYS.  This system will be connected to
the
>internet also so is it wise to make this change?
>I will look at creating a permanet pool of virtule devices and the
pre-authorize method but I will have to > fig that one out. I have never
tried that.


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---