Re: Sign on problem -- new iSeries conversion from s/390

Jimmy:

If you have qlmtsecofr set to '1', you cannot sign on to any device other
than the console unless you first grant QSECOFR _explicit_ authority to the
device...I would advise you to _not_ change qmltsecofr to '0'.

My advice:
1)  If you are using Client Access Express, specify a device name in your
TN5250 configuration (I made up a name like AQX9425AXP)

2)  Just to be safe, revoke *PUBLIC access to this device:
     RVKOBJAUT OBJ(QSYS/AQX9425AXP) OBJTYPE(*DEVD) USER(*PUBLIC) AUT(*ALL)

3)  Use the GRTOBJAUT command to grant QSECOFR authority to this device:
     GRTOBJAUT OBJ(QSYS/AQX9425AXP) OBJTYPE(*DEVD) USER(QSECOFR) AUT(*ALL)

4)  Now you can start a TN5250 session and logon to this device as QSECOFR

Please understand that there is a security issue when allowing QSECOFR to
sign on at a device other than the system console...

Steve Landess
Austin, Texas
(512) 423-0935


----- Original Message -----
From: "Green, Jimmy" <jgreen@grocerysupply.com>
To: "Midrange-L (E-mail)" <midrange-L@midrange.com>
Sent: Thursday, January 16, 2003 10:35 AM
Subject: Sign on problem -- new iSeries conversion from s/390


> I am a brand new os/400 user.  We are starting a conversion/new
development
> from S/390 to the iSeries.  We just powered on the box Mon.  I am trying
to
> get QSECOFR to be able to sign on in my office (pc using tn5250).  The
> console is twinax attached.  I have changed the qlmtsecofr in qsysval but,
> when I try to sign on I am getting the following message:
> CPF1394 User profile QSECOFR cannot sign on.
> I can sign on as QSECOFR on the console.
>
> I am getting the same error when I use QUSER.
>
> I look forward to learning os/400 and will be watching the list to learn
> more.
>
> Thanks for your help!!!
>
> Also is there a messages and code manual to find these types of error??
>
> Jimmy Green
> I.T. Operations Mgr.
> Grocery Supply Co.
> 903 885-7621 Ext 268
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo.cgi/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>