Re: New Machine, QSECOFR not authorized

joepluta@PlutaBrothers.com writes:

> I just plugged in a brand new machine, a model 270.  I connected the coax
>  connector and the power plug, and turned the machine on.  I have a 3489
>  Infowindow II attached to Port 0, and it comes up as "DSP01" in QBASE.  So,
>  I figure everything is cool.
>  
>  I log on as QSECOFR/QSECOFR, and I get CPF1110 Not Authorized to
>  Workstation!  How can this be?  I tried QSYSOPR and QSECADM, neither of
>  which would log on, and now I'm at the dreaded CPF1116 Next Unsuccessful
>  Attempt Varies Off Device.
>  
>  I am in a quandary.  How do you initially make DSP01 available to sign on 
as
>  QSECOFR?  There aren't a whole lot of manuals, but I do have the InfoCenter
>  disks - is the information there?  Do I have to go through a special 
signon?
>  (I seem to recall there was a special service signon - is that what I have
>  to do?  And if so, how do I do it?)
>  
>  As a second question, what do you do if you DO manage to vary off DSP01?
>  How do you get it back?
>  
>  Any help greatly appreciated.
>  
>  Joe

I am a babe compared to you guys, so I hope my 2 cents have positive value of 
suggesting constructive places to look.

The main console should be address 0 on port 0.

If the security files got to the new machine as a copy of a previous machine 
settings, it is quite possible that on the old machine the QCONSOLE was not 
named DSP01 ... ours for example is named CBOS4 because with M36 we had one 
device with 2 sessions & the other session is the main console for S/36, 
reverting to CBOS36 when M36 not up ... we have a system for naming our work 
stations based on corporate location & all those starting with letter C are 
in the Computer Room or Computer Infrastructure Sevices my department.  Now 
combine that kind of game with you can have a setting to say the security 
officer can ONLY sign on at the main console.  If we have DSP01 it is only 
because a work station just got connected to the network & we have not yet 
renamed it to something appropriate to the department it is located in.

QSECOFR/QSECOFR would only make sense to me as a new machine, where you not 
yet assigned a site password.

I doing my e-mail from home, so I not have some resources handy, but my 
reccollection is that:

There are multiple ways to IPL from the panel & one of the ways gets you into 
a special service mode, where among other things you can reset the QSECOFR 
password, but I do not believe you can get into WRKSYSVAL there to change 
rules where security officer can sign on.  As I recall, the default password 
to get into the special service mode when it came native from IBM was a 
simple stupid number, but that was years ago & I am sure IBM has beefed that 
up since I last had occasion to touch that area.

The manual on this topic has some name like "Problem Solving."

There also should be a card with illustrations of main panel that walks you 
through all the different kinds of settings, from which you should be able to 
figure out how to re-IPL into the service mode.

You need the hardware key to be able to re-IPL in non-standard way.

The boxes that come from IBM with a new machine or an OS/400 upgrade, 
sometimes include some key papers you not want to misplace, that have key 
numbers needed to get into some things.  I find that inventorying the 
contents of these boxes & figuring out what we need out of them is like a 
full time job for several days.

Even when not signed on, you can get at some HELP, although it is not very 
helpful.

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)
on a model 170 @ http://www.cen-elec.com 

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---