Hi Jim,
What was the user doing prior to this power down activity? The reason I ask, were they performing any type of maintenance (backups)or installing PTFs?
Regards,
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jim Franz
Sent: Tuesday, June 7, 2016 2:19 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Determine how pwrdwnsys was executed
Looking for clues to determine what happened.
V7R1 development system cume 15142
IBM iAccess for windows 7.1 latest svc pack
What we know so far is that a user logged onto a development system (to do some testing.
1 minute later QHST log indicates PWRDWNSYS initiated by the user, but users log (with 4 00 *seclvl and log CL *YES in jobd ) shows no command line entry of any command. Her story is no menu options executed...
No menu source shows pwrdwnsys or endsys (have searched for an api but not found one). Aware of GO POWER menu but not found a menu to connect to this.
Message ID . . . . . . : CPI0995 Severity . . . . . . . :
00
Message type . . . . . :
Information
Date sent . . . . . . : 06/07/16 Time sent . . . . . . :
11:01:49
Message . . . . : PWRDWNSYS command issued with parameters
specified.
Cause . . . . . : The Power Down System (PWRDWNSYS) command was requested
by
job 477963/XXXXX/BS7515C with the following parameters
specified:
-- How to end
*IMMED
-- Delay time
3600
-- Restart options
*NO
-- IPL source
*PANEL
-- End subsystem option
*DFT
-- Timeout option
*CONTINUE
-- Confirm
*ENVVAR
-- Image catalog
From job . . . . . . . . . . . : QSYSARB4
User . . . . . . . . . . . . : QSYS
Number . . . . . . . . . . . : 390670
From program . . . . . . . . . : QWCASDSM
Only other odd item is in user's job log, Image Catalogs on system unloaded
(CPCBC11) in 12 seconds prior to message about PWRDWNSYS (CPF0901) - I would have expected "after".
No packaged exit programs (have recommended previously..) QAUDJRN is active - not sure how to see remote command...
Auditing
options
*ATNEVT
*SECURITY
*PGMFAIL
*SAVRST
*AUTFAIL
*SERVICE
PC has been scanned
Jim
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
midrange.com
