RE: QUSRWRK Question

Hello:

Understand this happens even when the "victim" is hands-off of the PC.

There are numerous reasons why this could occur. Check the PC and make sure
it is not attempting to run a scheduled job, e.g. a job to check for PTF
updates via client abcess. If so, the password may have been changed on the
AS/400.

After all of these years you should have a security audit journal. Check PW
records, see what you get. Make sure that the records are not being created
by a system API (QSYGETPH, etc.)

Make sure the password is not expires.

If you set the status back to *ENABLED, make sure you clear out the number
of attempts or else one bad entry and you're off again...You can do this by
resetting the password. We like to reset the password to a dictated value,
do a PWDEXP(*YES), and make sure the user signs on "now".

Hope this helps...

Steve Glanstein
mic@aloha.com

>
>
> >From: "Mart, Nick" <Nick.Mart@kingland.com>
> >To: "'barsa2@ibm.net'" <barsa2@ibm.net>
> >Subject: RE: QUSRWRK Question
> >Date: Fri, 16 Jun 2000 13:17:09 -0500
> >X-Mailer: Internet Mail Service (5.5.2232.9)
> >
> >Al,
> >Here's an example of the message detail.
> >Message ID . . . . . . :   CPF1393       Severity . . . . . . . :   70
> >Message type . . . . . :   Information
> >Date sent  . . . . . . :   06/16/00      Time sent  . . . . . . :
> 09:54:22
> >Message . . . . :   Subsystem QUSRWRK disabled user profile JKING on
> device
> >   *N.
> >
> >Cause . . . . . :   User profile JKING has been disabled because the
> maximum number of sign-on attempts specified for the QMAXSIGN system value
has
> >been reached.
> >
> >Recovery  . . . :   To enable the user profile, have the security officer
> >
> >   change the STATUS parameter to *ENABLED on the Change User Profile
> >
> >   (CHGUSRPRF) command.
> >
> >
> >
> >Thanks,
> >
> >Nick
> >

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---