Re: How SST user was disabled?

I'm kind of pulling this out of where the sun don't shine, but I believe that the service tools authentication would be done in the FSP or hypervisor or whatever now, not the OS, especially when coming in from a console, which connects directly not to the OS but to the - I'll say FSP again - it's been so long I'm not sure exactly what touches what these days.

With STRSST, there IS a direct connection to the OS - your session - so maybe that can percolate the error from the other side.

But let's see what IBM say - and maybe you have a good RFE candidate, as I don't really think its' a bug.

Good luck
Vern

On 5/3/2017 10:34 AM, Justin Taylor wrote:

That was their initial response. They sent the issue to a different team, and I waiting for an answer.

-----Original Message-----
From: Rob Berendt [mailto:rob@xxxxxxxxx]
Sent: Wednesday, May 03, 2017 9:23 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: How SST user was disabled?

By this comment:
<snip>
They are logged only for sign-on to the OS itself.
</snip>
I suspect they are not aware that it logs for failures when trying STRSST.
Push back. Or at least ask them about that.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Justin Taylor <JUSTIN@xxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 05/03/2017 10:20 AM
Subject: RE: How SST user was disabled?
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Well Vern, it appears that IBM agrees with you. Here's what they sent me:

there are no entries logged from *AUTFAIL in QUADJRN for failed sign-on
attempts to the console. They are logged only for sign-on to the OS
itself.


From: Justin Taylor
Sent: Tuesday, May 02, 2017 7:00 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: How SST user was disabled?


It's a service tools user, so (AFAIK) the OS has to do the authentication.
If I do the same thing in a 5250 STRSST, it gets logged.



________________________________
From: Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx<
mailto:vhamberg@xxxxxxxxxxxxxxx>>
Sent: Tuesday, May 2, 2017 5:07 PM
To: Midrange Systems Technical Discussion
Subject: Re: How SST user was disabled?

That makes sense, right? The console is not running on the OS, IIRC, so
the audit log is not in play, so far as I can tell.

Someone please verify - it's been forever since I played in that world.

Vern