RE: QSECOFR can only login to the System Console

[Tom Hightower <tomh@xxxxxxxxx>]

QLMTDEVSSN has a value of '0'
No messages in DSPLOG or in QSYSOPR msgq about QSECOFR logging in.
It's a brand new box.

An update that may help in diagnosing the problem:
If I copy the QSECOFR user profile to another user id, that user id can 
only log in at the system console.  If I create a new user id and give it 
*SECOFR  user class, they can log in anywhere.

Also, the QSECOFR and other *SECOFR profiles have *ALLOBJ, *AUDIT, 
*IOSYSCFG, *JOBCTL, *SAVSYS, *SECADM, *SERVICE, *SPLCTL authorities.

Andy Nolen-Parkhouse wrote:

> Tom,
> 
> The QLMTSECOFR system value is really the only IBM-supplied place to look
> as far as preventing *ALLOBJ and *SERVICE users from signing on at places
> other than the console.  Changes to that system value are supposed to
> take place immediately.
> 
> Another alternative would be to look at authorities for the workstation
> device descriptions.
> 
> Is it possible that QLMTDEVSSN is set to limit users to one signon and
> QSECOFR is already signed on somewhere else?
> 
> Do you get an intelligent message when QSECOFR signs on somewhere else?
> 
> Is this a brand new box?
> 
> Regards,
> Andy Nolen-Parkhouse
> 
>> bounces@xxxxxxxxxxxx] On Behalf Of Tom
>> Subject: QSECOFR can only login to the System Console
>> 
>> In setting up a new 9406-270, I find that the QSECOFR (or any other
>> secofr
>> profile) can only log in to the system console.  I've checked system
>> value
>> QLMTSECOFR and it's set to '0'.  What else should I be looking at in
>> order
>> to allow secofr profiles to log in at other than the system console?