Re: User profile question

[Pete Massiello <pmassiello@xxxxxxxxxxxxxxxx>]

   Ed,

       You are 100% right, I just tried this out. Even old dogs can learn.
    Thanks for the information. .

       Pete

   Ed Fishel wrote:

 Pete Massiello wrote on 01/25/2006 09:45:10 AM:

  

    If you make QSECOFR *Disabled, you won't be able to sign on anywhere.

    I think when she is referring to signing on at the console, she is
    

 talking
  

    about
    making the system value QLMTSECOFR set to a 1, and then only giving
    explicit
    authority to QCONSOLE and DSP01 so that you can sign on to either of
    

 these
  

    devices
    with the QSECOFR user profile and then no others.
    

 Sorry but this is not correct. According to the Security Reference manual
 "You can always sign on at the console with the QSECOFR, QSRV, and QSRVBAS
 profiles, no matter how the QLMTSECOFR value is set."

 The QSECOFR user profile is allowed to sign on to the system console even
 when the QSECOFR user profile is disabled. The only time I can think of
 when QSECOFR will not be able to sign on to the console is when QSECOFR has
 a long or complex password that will only work at password level 2 or 3 and
 then the password level of the system is changed to 0 or 1.


 Ed Fishel,
 edfishel@xxxxxxxxxx