Re: Auditing user profile changes: Noting when a password is changed from *NONE to something else.

I am auditing changes to user profiles.
I want to audit:
- When *ALLOBJ is added
- When *SECADM is added
- When Limited Capabilities is changed from *YES.
- When password is changed from *NONE.

I am trying to use
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_74/rzarl/rzarlf12.htm
Unlike file changes you don't see before/after shots. That, and they
probably don't want to log passwords where it can be found so easily.

From the doc I see these columns:
- Current *ALLOBJ special authority
- Current *SECADM special authority
- Previous *ALLOBJ special authority
- Previous *SECADM special authority

However these only show the current value:
- The value of limited capabilities parameter.
- Password is *NONE.

So how do I determine if the password was changed from *NONE? Or if the
limited capabilities was changed from *YES?


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
<https://www.google.com/maps/search/2505+Dekko+Drive?entry=gmail&source=g>
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com