Re: Changing passwords issue

[Ed Fishel <edfishel@xxxxxxxxxx>]

Mike Silvers wrote:
>This is really weird.  We had the audit values set as you
>mentioned in the email.  I looked through the CP records.
>There was nothing except the entries for the profile being
>disabled when I tried to sign on.  Now, another developer
>ran into the same problem.  I checked the journal entries
>again and did not see anything related to the CP entries
>and his profile. I looked through all of the entries and I
>am not able to find anything relating to either his or my
>user profile.
>
>This has occurred with three different user profiles.
>
>Do you have any other recommendations to audit changes to
>the user profiles?

Take a look at the PW audit records. You will need to have *AUTFAIL set in
the QAUDLVL system value to cause PW audit records to be generated. If you
are not getting the CP audit records then it does not sound like someone is
changing the passwords of your user profiles, or restoring older version of
the user profiles and thus changing them to their older password value.  Is
it possible that someone is trying to break into the system and causing the
profiles to be disabled?

Is the failure occurring at a green screen sign-on or on one for a Client
Access sign-on?  The reason I ask is that sometimes when the Windows
password does not match the iSeries password, Client Access (and/or similar
products) may disable the user profile from that device while the real user
profile can still be used to sign on from a different real (or emulation)
green screen. I am sure you can find some discussion of this problem in the
archives.

Ed Fishel,
edfishel@xxxxxxxxxx