RE: Electronic Signatures

More fun is add the pwrdwnsys as a prestart job.  Just change a current
prestart job description to execute the command.  Ran in to this once and
took several IPLs and lots of digging to find.

-----Original Message-----
From: Rob Berendt [mailto:rob@dekko.com]
Sent: Thursday, September 16, 1999 1:12 PM
To: MIDRANGE-L@midrange.com
Subject: RE: Electronic Signatures


Point well taken




bob@cstoneindy.com on 09/16/99 03:06:32 PM
Please respond to MIDRANGE-L@midrange.com@Internet
To:     MIDRANGE-L@midrange.com@Internet
cc:      
Fax to: 
Subject:        RE: Electronic Signatures

Don,

A list of users is easy...I'll even bet you already know how to do it.

BTW, if your goal is just to screw up the system, create a scheduled 
job entry to do a pwrdwnsys every few hours.

Or better yet: DLTPGM QSYS/*ALL

The best thing of all is to go into strsst and rename the QSYS library 
(did that one time at IBM's direction...life was much worse after than 
before)...this will totally screw a machine.

Of course, with any of the above things, your new job title would 
probably be "Unemployed".

My point is that very few things can not be abused.  Some are harder. 
 If my goal was to cause problems, don't think I would resort to 
obscure API's...to much work and can do so much better with os/400 
commands.

Bob

-----Original Message-----
From:   Schenck, Don [SMTP:Don.Schenck@WL.com]
Sent:   Thursday, September 16, 1999 11:56 AM
To:     'MIDRANGE-L@midrange.com'
Subject:        RE: Electronic Signatures

Cool ... that means one could create a REALLY COOL program:

It keeps calling the API with different user names until all of the 
users
are disabled!

A MAJOR pain for the sysadmin!

So HOW does one go about getting a list of users????

-- Don

-----Original Message-----
From: Bob Crothers [mailto:bob@cstoneindy.com]
Sent: Thursday, September 16, 1999 10:55 AM
To: 'MIDRANGE-L@midrange.com'
Subject: RE: Electronic Signatures


Rob,

As shipped, run time access to these API's is restricted.  And of
course, before you can even use it, you must a) have a program and b)
beable to execute the program.

So...it would only help if you already have access to the system you
are trying to get into...actually, quite a bit of access.

BTW, the Get Profile Handle DOES disable the profile after the max
number of signon attempts has been exceeded.  I just tested it (V3R7
system).
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to 
MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: 
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---