Re: How to start DST without an IPL -- MIDRANGE-L

When you do get into DST, either via IPL or via function 21,
one of the options in DST lets you configure this stuff...

----- Original Message -----
From: <rob@dekko.com>
To: <midrange-l@midrange.com>
Sent: Wednesday, November 06, 2002 8:51 AM
Subject: Re: How to start DST without an IPL


> This is a multipart message in MIME format.
> --
> [ Picked text/plain from multipart/alternative ]
> Yes.  With V5R2, you get that stupid message when you run CHGDSTPWD.  Then
> you have to start DST mode with function-21, to change the password.  The
> message alludes that you can configure your system not to have to do this
> but durned if I know how.
>
> Rob Berendt
> --
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
> Benjamin Franklin
>
>
>
>
> Vern Hamberg <vhamberg@centerfieldtechnology.com>
> Sent by: midrange-l-admin@midrange.com
> 11/06/2002 10:05 AM
> Please respond to midrange-l
>
>         To:     midrange-l@midrange.com
>         cc:
>         Fax to:
>         Subject:        Re: How to start DST without an IPL
>
>
> Rob
>
> Not in QCPFMSG, at least. This looks new. What I wonder is, what happens
> if
> you disable QSECOFR's service tools user ID? I've been in an environment
> where many people had access to the QSECOFR service tools ID (not a
> production shop, a lab). We often ran into the problem where we did not
> remember whether the password was uppercase or lowercase, and then whoever
> got wrong would use CHGDSTPWD and have to find one that had not been used,
> then notify the rest of the team, etc.  yada yada yuk! So I've advocated
> having individual service tools IDs for anyone who needs to get to DST,
> and
> that no one be given access to QSECOFR for this, except one primary
> administrator.
>
> But does v5r2 make this even more prone to this kind of confusion?
>
> Vern
>
> At 08:59 AM 11/6/2002 -0500, you wrote:
> >This is a multipart message in MIME format.
> >--
> >[ Picked text/plain from multipart/alternative ]
> >Does V5R1 have this message?  I don't have any machines with that old of
> >an OS:
> >
> >CPF4AB7
> >Message . . . . :   Service tools user ID password cannot be changed.
> >Cause . . . . . :   Your system is configured to prevent a service tools
> user
> >   ID with a default and expired password from changing its own password.
> >
> >Recovery  . . . :   Either change the password of the service tools user
> ID
> >   through DST or use the Start Service Tools (STRSST) command, select
> the
> >   option to work with system security, and enable service tools user ID
> > with a
> >   default and expired password to change its own password. Try the
> request
> >   again.
> >
> >Rob Berendt
> >--
> >
> >Vern Hamberg <vhamberg@centerfieldtechnology.com>
> >
> >         To:     midrange-l@midrange.com
> >         cc:
> >         Fax to:
> >         Subject:        Re: How to start DST without an IPL
> >
> >
> >On V5R1, anyway, if you use CHGDSTPWD and then go into DST (or SST), you
> >need to change the password, and you cannot repeat a certain number (?)
> of
> >them.
> >
> >But once _in_ DST, you can change the password for any DST user to
> >anything, even repeated ones.
> >
> >This is similar to the situation with CHGUSRPRF vs. CHGPWD - the former
> >does not enforce the password rules, the latter does.
> >
> >But V5R2 may have changed some of this.
> >
> >Vern
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>