Re: Setting QLMTSECOFR from System i Navigator

[Aaron Bartell <aaronbartell@xxxxxxxxx>]

Bingo!  This was it. Thanks Chris.

Lukas, is this something I should add to the wiki page you put together or
is this on the more uncommon side of things?  In my mind it would be common
to want secofr type profiles access to devices outside of OpsCons, but I
don't know if it is common to have the setting set the way it was on my
machine.

Aaron Bartell
http://mowyourlawn.com


On Fri, Oct 30, 2009 at 3:46 PM, Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>wrote:

> iNav - Security - Policies - Signon Policy - Restrict privileged
> users...
>
>
>
> Chris Bipes
> Director of Information Services
> CrossCheck, Inc.
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Aaron Bartell
> Sent: Friday, October 30, 2009 1:38 PM
> To: Midrange Systems Technical Discussion
> Subject: Setting QLMTSECOFR from System i Navigator
>
> Hi all,
>
> Well, I am finally able to log in to my new POWER6 machine (take that
> you
> BOOTP process - I prevailed!!).
> Well, I kind of won.  Right now I am trying to figure out how to set the
> QLMTSECOFR from System i Navigator as my Ops Cons is no longer being
> recognized when I boot the machine.  When I try to sign into a regular
> 5250
> session with QSECOFR I get this message:
>
> "CPF1110 Not authorized to work station."
>
> The good thing is that after a full boot I can connect to the machine
> using
> System i Navigator and Systems Director.  What this means is I can
> create
> new profiles from System i Navigator just fine, but I can't sign into
> the
> green screen with a security officer profile because of what the
> QLMTSECOFR
> system value is set to.  All of the documentation seems to be telling me
> I
> need to change QLMTSECOFR from SST, and SST can only be accessed with
> secofr
> profile - oh what a catch 22 I am in.
>
> So, anybody know if System i Navigator can change QLMTSECOFR?  I am not
> seeing the value anywhere.  I did a search in the System i Navigator
> help
> and it directs you to a command line for that capabo
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.