Re: disable all Q* ibm supplied profiles and chaning default passwords

Disable all the IBM supplies profiles, better check on that. There are
several of them that cannot be disabled and still have everything work.
You can remove the passwords from most of them but if you disable QSECOFR
and QSYSOPR you will really hate it when you really need those profiles.
That happens when least expected and at the most critical time possible (
Murphy anyone).

Put policies in place to keep password changed and such. Don’t mess with
IBM profiles.

On Tue, Oct 8, 2019 at 1:16 PM <iseriesstuff@xxxxxxxxx> wrote:

We are working on PCI compliance stuff. An audit showed some of the ibm
supplied profiles still have default passwords.



I would like to change all default passwords and disable all Q* profiles. I
did create an alternate qsecofr profile with strong user/password naming.



Does anyone see any issues with doing this? I know IBM uses a bunch of
those
profiles for internal stuff.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com