Re: INCREDIBLE - what am I missing here... ??? !!!

neilp@dpslink.com wrote:

> Al,
>
> In answer to some of your questions.
>
> If you run DSPAUTUSR you will see most of the IBM "Q" user profiles have no
> password (*NONE).
> Well, that's what it would have shown before you went and assigned
> passwords to profiles that never had any in the first place !  :-)
>
> Exceptions are QSECOFR, QSRV, QSRVBAS, QPGMR, QSYSOPR & QUSER.

For new releases after V3R7, only QSECOFR get's shipped with a password, all
other IBM profiles get sent with Passoerd = *NONE.  But if you installed your
system prior to V3R7, and have assigned a password to one of these IBM profiles,
IBM will not change these passwords during an OS upgrade.


> I used to have QUSER with password *NONE, until they came out with the host
> server jobs that want to user QUSER, so now I just set that one to some
> weird string and don't even bother to write it down, just so the server
> jobs can use it.
> That was a few releases ago.  Not sure if that's still necessary, or if
> they can use a *DISABLED  QUSER now (John Earl ?).

I don't believe that a *DISABLED QUSER will work, but you can set the password 
of
QUSER to *NONE.


> Good luck in tracking down the uses of all the Q* user profiles.  I don't
> think on-line help would answer that question.

It's actually fairly accessable in the Security Reference manual.

jte
--
John Earl                    johnearl@400security.com
The PowerTech Group      --> new number --> 253-872-7788
PowerLock Network Security   www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---