Re: disable all Q* ibm supplied profiles and chaning default passwords

[Jim Oberholtzer <midrangel@xxxxxxxxxxxxxxxxx>]

Disable all the IBM supplies profiles, better check on that.    There are
several of them that cannot be disabled and still have everything work.
You can remove the passwords from most of them but if you disable QSECOFR
and QSYSOPR you will really hate it when you really need those profiles.
 That happens when least expected and at the most critical time possible (
Murphy anyone).

Put policies in place to keep password changed and such.   Don’t mess with
IBM profiles.

On Tue, Oct 8, 2019 at 1:16 PM <iseriesstuff@xxxxxxxxx> wrote:

> We are working on PCI compliance stuff. An audit showed some of the ibm
> supplied profiles still have default passwords.
>
>
>
> I would like to change all default passwords and disable all Q* profiles. I
> did create an alternate qsecofr profile with strong user/password naming.
>
>
>
> Does anyone see any issues with doing this? I know IBM uses a bunch of
> those
> profiles for internal stuff.
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com