Thanks Chris for this information. We did see in QSYSOPR and the QHST log that QSECOFR was the profile used to end the Netserver jobs. However, when I looked at the previous sign-on field on the user profile QSECOFR, it had not been used to sign onto our server for over three months prior to this incident happening, so that tells me that QSECOFR was not used to sign on to our iSeries server the day the Netserver went down. That is where my problem lies.
Dave DeBoe
Senior Systems Admin.
Arapahoe County Government
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chris Bipes
Sent: Wednesday, July 06, 2016 9:30 AM
To: 'midrange-l@xxxxxxxxxxxx' <midrange-l@xxxxxxxxxxxx>
Subject: RE: NetServer
Start looking for all jobs around that time that were run by QSECOFR. Someone must of ended the service. That someone signed on as QSECOFR. Perhaps with System i Navigator. I would do a DSPLOG to an out file and query that for QSECOFR.
Chris Bipes
Director of Information Services
CrossCheck, Inc.
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Dave DeBoe
Sent: Wednesday, July 06, 2016 8:04 AM
To: midrange-l@xxxxxxxxxxxx
Subject: NetServer
We had our Netserver end out of the blue the other day. Looking at theQSYSOPR msgq, and the QHST log, I found jobs related to the Netserver that were ended by QSECOFR. When I looked at the previos sign on date for this profile, it had not been used to sign on in over a month prior to this event happening the other day. I have no idea how this is possible. A couple of messages in QHST showing that QSECOFR ended these jobs which ultimately took down our Netserver:
Job 168511/QPGMR/QZLSSERVER was ended by user QSECOFR.
All prestart jobs are ending for program QZLSFILET in QSYS.
Job 168515/QUSER/QZLSFILET was ended by user QSECOFR.
Job 208298/QUSER/QZLSFILE was ended by user QSECOFR.
Job 776449/QUSER/QZLSFILE was ended by user QSECOFR.
Job 508138/QUSER/QZLSFILE was ended by user QSECOFR.
Job 508139/QUSER/QZLSFILE was ended by user QSECOFR.
Job 182637/QUSER/QZLSFILE was ended by user QSECOFR.
Job 624577/QUSER/QZLSFILE was ended by user QSECOFR.
Job 528897/QUSER/QZLSFILE was ended by user QSECOFR.
Job 528898/QUSER/QZLSFILE was ended by user QSECOFR.
Job 528899/QUSER/QZLSFILE was ended by user QSECOFR.
Job 624577/QUSER/QZLSFILE ended on 06/30/16 at 15:32:34; 162.206 seconds used i5/OS Support for Windows Network Neighborhood (i5/OS NetServer) QACSD400 ended.
We are running i5/OS V6R1M1, yes I know it is no longer supported. We have the latest and LAST cumme applied and the latest groups and hypers installed.
Thoughts??
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
midrange.com
