Re: Auditing, renaming, deleting IBM profiles

All of the replies to Loyd's query, while true, do not answer his question regarding "official IBM documentation" to what we all know.

I searched both the Info Center and the System i site, but couldn't find any such "document" or even a mention. The closest that I came was in the Info Center: Changing Known Passwords -

http://publib.boulder.ibm.com/infocenter/iseries/v5r4/topic/rzamv/rzamvchangeknownpwd.htm?

For something more "official," Loyd, you might contact software support or, better yet, submit a DCR to allow these profiles to be deleted. The answer will, of course, be "Are you out of your @#$% mind?!" But you might also get a reasoned reply as to why not. Or a PMR saying you can't delete or rename them; you'll certainly get faster response than to a DCR.


* Jerry C. Adams
*IBM System i Programmer/Analyst
B&W Wholesale Distributors, Inc.* *
voice
615.995.7024
fax
615.995.1201
email
jerry@xxxxxxxxxxxxxxx <mailto:jerry@xxxxxxxxxxxxxxx>



Joe Pluta wrote:

From: lgoodbar@xxxxxxxxxxxxxx

Other than "common knowledge" that IBM user profiles should not be
renamed or deleted, is there any official IBM documentation stating the
fact? We have auditors who want to rename or delete QSECOFR, QUSER,
QSRV, QSRVBAS, QPGMR, QSYSOPR, &c. I found and printed IBM's command
help for DLTUSRPRF that restricts deleting those profiles, but have not
seen anything on a rename.

Go immediately to your CEO and explain that they have hired the wrong
auditing firm. I am not being funny. If the auditors are seriously
requiring something as rabidly stupid as renaming QSECOFR, I can only
shudder at what other "recommendations" they are making for your company.

These auditors are dangerous, and you need to get them away from your
mission critical systems as quickly as possible.

Joe