RE: Vary On Sessions

Usually, they vary off due to what I like to refer to as a PEBKAC error
(problem exists between keyboard and chair).

Seriously, though, there are some system values you may want to look at:

QMAXSIGN
- This is how many attempts a user has to sign on improperly.
- You can allow 1-25 attempts.
- Having this too low would likely increase the vary offs, but having it too
high would be a security risk.
- 3 may be a good setting

QMAXSGNACN
- This is what you want to happen when the user fails to sign on within the
number of times allowed by QMAXSIGN
- Possible values are:
1=Disable device - the device is varied off
2=Disable profile
3=Disable device and profile
- 3 is the most secure setting. I would definitely want to disable the
profile as this will hinder someone from trying to constantly guess a user's
password.

You may also wish to lok at some of the password system values as harsh
password settings can confuse users (as well as operators!).
WRKSYSVAL QPWD*

One other thing to keep in mind, if you're questioned by users... We all
know that if you type the wrong password that you receive a message.
However, a similar message is given when you enter the wrong user profile.
We see this often that a device is varied off and the profile is not
disabled. The user is used to typing the wrong password, so they will assume
that the error message is because of the password and will not look at the
user profile they entered. Thus, they will keep entering the correct
password but for an invalid user profile. This means that the device will
vary off but the profile is alright.

I hope you enjoy the AS400 (er, iSeries) as much as we do!!

Chris Whisonant