Re: How SST user was disabled?

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

I'm kind of pulling this out of where the sun don't shine, but I believe 
that the service tools authentication would be done in the FSP or 
hypervisor or whatever now, not the OS, especially when coming in from a 
console, which connects directly not to the OS but to the - I'll say FSP 
again - it's been so long I'm not sure exactly what touches what these days.

With STRSST, there IS a direct connection to the OS - your session - so 
maybe that can percolate the error from the other side.

But let's see what IBM say - and maybe you have a good RFE candidate, as 
I don't really think its' a bug.

Good luck
Vern

On 5/3/2017 10:34 AM, Justin Taylor wrote:
> That was their initial response.  They sent the issue to a different team, and I waiting for an answer.
>
> -----Original Message-----
> From: Rob Berendt [mailto:rob@xxxxxxxxx]
> Sent: Wednesday, May 03, 2017 9:23 AM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> Subject: RE: How SST user was disabled?
>
> By this comment:
> <snip>
> They are logged only for sign-on to the OS itself.
> </snip>
> I suspect they are not aware that it logs for failures when trying STRSST.
> Push back.  Or at least ask them about that.
>
>
> Rob Berendt
> --
> IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to:  2505 Dekko Drive
>            Garrett, IN 46738
> Ship to:  Dock 108
>            6928N 400E
>            Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> From:   Justin Taylor <JUSTIN@xxxxxxxxxxxxx>
> To:     Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> Date:   05/03/2017 10:20 AM
> Subject:        RE: How SST user was disabled?
> Sent by:        "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>
>
>
>
> Well Vern, it appears that IBM agrees with you.  Here's what they sent me:
>
> there are no entries logged from *AUTFAIL in QUADJRN for failed sign-on
> attempts to the console. They are logged only for sign-on to the OS
> itself.
>
>
> From: Justin Taylor
> Sent: Tuesday, May 02, 2017 7:00 PM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> Subject: Re: How SST user was disabled?
>
>
> It's a service tools user, so (AFAIK) the OS has to do the authentication.
>   If I do the same thing in a 5250 STRSST, it gets logged.
>
>
>
> ________________________________
> From: Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx<
> mailto:vhamberg@xxxxxxxxxxxxxxx>>
> Sent: Tuesday, May 2, 2017 5:07 PM
> To: Midrange Systems Technical Discussion
> Subject: Re: How SST user was disabled?
>
> That makes sense, right? The console is not running on the OS, IIRC, so
> the audit log is not in play, so far as I can tell.
>
> Someone please verify - it's been forever since I played in that world.
>
> Vern