RE: SST profiles under V5R1

We just had the same trouble this week in V5R1.

OS/400 (regular) profiles and DST profiles are completely different. We got
help from 1-800-IBM-SERV as follow:

First sign on with OS/400 QSECOFR profile
On command line, enter : CHGDSTPWD *DEFAULT
It restores DST QSECOFR profile and password to default value (QSECOFR)
Start SST
Sign on QSECOFR/QSECOFR
The default value expires once used and you get screen to change password.
Be sure you choose to enter them either in upper case or in lower case (new
in V5R1). That's the new feature which lead us to disable DST QSECOFR !

For more information:
AS/400e series /Security - Reference/Version 4
Document Number SC41-5302-02
4.36.11.3 Recovering a Lost DST or QSECOFR Password


Other profiles for SST are DST default profiles (11111111, 22222222 and
QSRV). IBM expects you to change their default password the same way you
used to change default OS/400 profiles when you got your black box. You can
create you own DST/SST profiles with DST QSECOFR from within the DST
environment. You enter DST environment only in the middle of a manual IPL
from your console. Don't forget to grant new DST profiles with expected
privilege (F7) !!!

For more information about DST in V5R1:
Chap7, p81 et +
 http://publib.boulder.ibm.com/html/as400/v5r1/ic2924/books/c4153005.pdf

Hope this will help you,

Christian

ASP-re Inc.

Christian Enriquez
440, René-Lévesque O. suite 203
Montréal,Québec, H2Z 1V7
514-392-0007 ou christian@asp-re.com



-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of Robin Coles
Sent: Friday, August 03, 2001 08:39
To: 'MIDRANGE-L@midrange.com'
Subject: SST profiles under V5R1


We've managed to enter the wrong password to enter SST for the QSECOFR
profile 3 times and it's now disabled the profile.  Any idea how we can
re-enable it.  The *user* profile for QSECOFR is fine and shows as *ENABLED,
it's only the SST one that's locked out.

We can get into SST with other profiles.

Any ideas?  A quick scan of the un-information centre wasn't fruitful.

Cheers
Robin
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---