|
Mike Silvers wrote: >I am having a problem with a user profile. The password is >getting changed somewhere along the line. I need to determine >where the password is getting changed. I looked in the QHST >log, but I can not find any reference to the password being >changed. Does anyone have any ideas where I can look to >determine how/when the password was changed? Is there an >exit program that can record who changed and when passwords >were changed (or when a change was made to the user profile)? Take a look at the CP audit record in the QAUDJRN audit journal. The Password Changed field will be set to "Y" when the password was changed for the user profile. To cause the CP audit record to be generated you will need to have *SECURITY specified in the QAUDLVL system value and *AUDLVL specified in the QAUDCTL system value. The Change Security Auditing (CHGSECAUD) command can be used to set both of these system value and create the audit journal if it does not exist. The CP audit record will also be written when the user profile is restored. Ed Fishel, edfishel@xxxxxxxxxx
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.