Re: Auditing user profile changes: Noting when a password is changed from *NONE to something else.

Rob,

what if you used the exit points:

Exit Point Format Registered Text
QIBM_QSY_CHG_PROFILE CHGP0100 *YES Change User Profile - after
QIBM_QSY_CHG_PROFILE CHGP0200 *YES Change User Profile - before

you could grab a before/after image and see what changed.

Bryan


Rob Berendt wrote on 7/23/2019 4:02 PM:

I am auditing changes to user profiles.
I want to audit:
- When *ALLOBJ is added
- When *SECADM is added
- When Limited Capabilities is changed from *YES.
- When password is changed from *NONE.

I am trying to use
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_74/rzarl/rzarlf12.htm
Unlike file changes you don't see before/after shots. That, and they probably don't want to log passwords where it can be found so easily.

From the doc I see these columns:

- Current *ALLOBJ special authority
- Current *SECADM special authority
- Previous *ALLOBJ special authority
- Previous *SECADM special authority

However these only show the current value:
- The value of limited capabilities parameter.
- Password is *NONE.

So how do I determine if the password was changed from *NONE? Or if the limited capabilities was changed from *YES?


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com