Re: Telnet lock down

[Bruce Vining <bvining@xxxxxxxxxx>]

Check the audit journal for code T type PW.  If the first byte of the entry
specific data is U then you have an invalid user name.



                                                                           
             "Ken Slaugh"                                                  
             <ken.slaugh@cm-in                                             
             c.com>                                                     To 
             Sent by:                  "Midrange Systems Technical         
             midrange-l-bounce         Discussion"                         
             s@xxxxxxxxxxxx            <midrange-l@xxxxxxxxxxxx>           
                                                                        cc 
                                                                           
             01/10/2005 01:18                                      Subject 
             PM                        Telnet lock down                    
                                                                           
                                                                           
             Please respond to                                             
             Midrange Systems                                              
                 Technical                                                 
                Discussion                                                 
                                                                           
                                                                           




One of our salesman was asked this by a iSeries customer:

<< I need to monitor all the sign on attempts to the iSeries, this
includes attempts that do << not have a real profile on the machine.  I
looked over the security audit log but did not << find the information I
was looking for there.  I can monitor for failed log in attempts << but
only for profiles that exist, but I could not find a query for profiles
that don't  << exist.  I would like to get at least profile name and IP
address.

<< I am also looking for a way to lock out specific IP addresses,
regardless of profile, from << using the system.

I thought this group may have some helpful suggestions. Any takers?

Thanks, Ken



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chuck Lewis
Sent: Monday, January 10, 2005 11:06 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: FTP Issue

Care to elaborate Rob ?

Thanks :-)

Chuck

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Monday, January 10, 2005 1:49 PM
To: Midrange Systems Technical Discussion
Subject: Re: FTP Issue

CPYTOIMPF has had lots of changes in V5R3.  Most of them will pi$$ you
off.  Use CPYTOSTMF if it will work for you.

Rob

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.