Easy. They have too much authority and you are restricting what can be done over SQL. I run commands and submit jobs over SQL every day. Saves me signing in to a 5250 session. I can build some nice long SQL scripts and run them faster than making a one-off CL program to do it.
Coy Krill
Core Processing Administrator/Analyst
Washington Trust Bank
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: 2017 December 13 13:22
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: How could a 3rd party remote support user run a process from their PC that would change several system values and submit several jobs?
Importance: Low
How could a 3rd party remote support user un a process from their PC that would change several system values and submit several jobs?
I'm think some sort of run remote command.
From QHST
Message ID . . . . . . : CPIAD09
Date sent . . . . . . : 12/13/17 Time sent . . . . . . : 08:45:17
Message . . . . : User CVGVALTE from client 198.49.86.86 connected to job
586434/QUSER/QZDASOINIT in subsystem QUSRWRK in QSYS on 12/13/17 08:45:17.
From the QAUDJRN, I know it was done by the below job and user.
Journal . . . . . . : QAUDJRN Library . . . . . . : QSYS
Sequence . . . . . . : 132992229
Code . . . . . . . . : T - Audit trail entry
Type . . . . . . . . : SV - Change to system value
Object . . . . . . . :
Type . . . . . . . :
Date . . . . . . . . : 12/13/17
Time . . . . . . . . : 08:45:28
Flag . . . . . . . . : 0
Count/RRN . . . . . : 0
Commit cycle ID . . : 0
Nested commit level : 0
Job . . . . . . . . : 587349/QUSER/QZRCSRVS
User profile . . . . : CVGVALTE
Ignore APY/RMV . . . : No
Ref constraint . . . : No
Created havoc on our LPAR for a bit.
I got all system values changed back to original, except for QAUDLVL , still need to find those original settings.
1) If this was run with remote command, how can we lock this down, except for certain users?
Thank You
_____
Paul Steinmetz
IBM i Systems Administrator
Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071
610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home
psteinmetz@xxxxxxxxxx
http://www.pencor.com/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
http://amzn.to/2dEadiD
---------------------------------------------------------------------
This electronic mail message and any attachments may contain confidential or privileged information and is intended for use solely by the above-referenced recipient. Any review, copying, printing, disclosure, distribution, or other use by any other person or entity is strictly prohibited under applicable law. If you are not the named recipient, or believe you have received this message in error, please immediately notify the sender by replying to this message and delete the copy you received
---------------------------------------------------------------------
midrange.com
