Re: [EXTERNAL] CPIB682 - User profile disabled for...

Hi Jim

I just looked up what is in the QUSRTOOL library, because I thought the
Netserver tool was there - and it is. There is a source member TZLSINFO
in QUSRTOOL/QATTINFO - it is described as the
i5/OS NetServer (GO NETS) Tool. On our systems it was created in
NETSRVCMD library.

I know you know about QUSRTOOL, how it used to have almost everything
Jim Sloan came up with. Eventually I think Jim took it and used it to
make TAA Tools. And eventually Al Barsa marketed it. I think that's sort
of right.

So we don't have all those nice utilities that used to be included in
QUSRTOOL. There are still several interesting things there.

Some years ago, a friend of mine was working at Minnesota Public Radio,
they had an S/38 but were changing to use a DEC VAX, I believe. They had
some S/38 manuals, including some stuff from a 1986 System/38 conference
in Dallas. One of the books was a ton of CL stuff Jim Sloan had written.
I may have to find it again, just for fun and profitability.

Cheers
Vern

On 4/21/2023 9:23 AM, Jim Oberholtzer wrote:

NETSVRCMD library is downloaded from IBM. Long ago someone (Jim Stone?)

wrote the tooling for 5250 and IBM has more or less kept it functional. You
can find it by doing a search for it. If you have not refreshed it in
several years you might want to look at the version to be sure it’s not
superseded, however changes come out so infrequently that you might
not need to update it.

--
Jim Oberholtzer
Agile Technology Architects

On Apr 21, 2023, at 9:18 AM, Greg Wilburn <

gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

George,

We are on v7r3 and have NETSRVCMD library. I don't recall if I had to

download that separately, or if it was part of a Tech Refresh.

https://www.ibm.com/support/pages/manage-ibm-i-netserver-without-navigator-go-nets

You asked for a solution to reduce disabled netserver passwords. I

gave you what works for us. We worked with IBM on this. You're welcome to
take my advice or leave it.

Our experience is that it's easier for a person to remember ONE

password, than two (especially when it's difficult for a user to know which
system they are actually accessing).

Regardless of what you do.. I urge you to go to PWDLVL 3... We are a

small company of just over 200... our password requirements on both Windows
and IBM i are long and follow the recommended complexity and change
intervals.

Two years ago, we were at PWDLVL 1 - the switch to 3 was the easiest

security measure we have taken.

Greg

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of

George Smith

Sent: Friday, April 21, 2023 9:28 AM
To: Midrange Systems Technical Discussion <

midrange-l@xxxxxxxxxxxxxxxxxx>

Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...

Greg,

I must assume that your NETSRVCMD is a V7R5 library. Also, even if I go

to PWDLVL 3 my users will have to keep their passwords in sync? None of the
documentation addresses that they must stay in sync to keep from disabling
the Network Neighborhood.

George.....

From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of

Greg Wilburn

Sent: Friday, April 21, 2023 8:16 AM
To: Midrange Systems Technical Discussion <

midrange-l@xxxxxxxxxxxxxxxxxx>

Subject: RE: [EXTERNAL] CPIB682 - User profile disabled for...

ADDLIBLE NETSRVCMD then GO NETS, option 12 This is easier than using

Navigator to reset users. Now to fix the real problem: We use the IFS
Extensively - users accessing for a variety of reasons. 1. Go

External (gwilburn@xxxxxxxxxxxxxxxxxxxxxxx<mailto:

gwilburn@xxxxxxxxxxxxxxxxxxxxxxx>)

Report This Email<

https://protection.inkyphishfence.com/report?id=c2tvdXQtZnJ1aXQtb2YtdGhlLWVhcnRoL2dzbWl0aEBmb3RlLmNvbS8wNjAwODY1MjkzMGFjZWQ2ZjBjNDFkYjIwNDFlMzgwNy8xNjgyMDgyOTYyLjQ5#key=f7bf6190320aea70bc922d8131a78f76>
FAQ<https://getskout.com/emailprotectionfaq/> Skout Email Protection<
https://getskout.com/emailprotection/>

ADDLIBLE NETSRVCMD then GO NETS, option 12

This is easier than using Navigator to reset users.



Now to fix the real problem:

We use the IFS Extensively - users accessing for a variety of reasons.



1. Go to Password level 3. If you're not there, shame on you. Such an

easy security enhancement

2. Have your users synchronize their windows & IBM password - when they

change one, change the other to match exactly

3. On the PC: Open Credential Manager (search for it). Delete any

saved Windows Credentials for the IBM I - windows will use the "windows
password" to connect to the IFS

Know that a SINGLE click on an IFS folder with the wrong password will

disable the user in Netserver. The PC attempts to connect several times if
unsuccessful.

You will still get some people disabling themselves - usually when they

change their password after having already connected to the IBM i. If the
windows password is changed at logon, then the IBM i password changed
before accessing the IFS they will be fine.

HTH,

Greg



-----Original Message-----

From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx<mailto:

midrange-l-bounces@xxxxxxxxxxxxxxxxxx>> On Behalf Of Åke Olsson

Sent: Friday, April 21, 2023 5:22 AM

To: midrange-l@xxxxxxxxxxxxxxxxxx<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>

Subject: [EXTERNAL] CPIB682 - User profile disabled for...



One specific user has constant issues with being disabled for access to

IFS

folders through windows client.







He claims adamantly that the correct password is used and has changed

from

using a script to attaching the folders in windows explorer.







Doing constant resets using the navigator is getting to be quite a

chore...

Ideas? Any ideas??







/Ake Olsson/







--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:

MIDRANGE-L@xxxxxxxxxxxxxxxxxx>

To subscribe, unsubscribe, or change list options,

visit: https://lists.midrange.com/mailman/listinfo/midrange-l<

https://shared.outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGNZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSvat7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQCIH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvxLU_zviTPI8LzkGMebSjA

or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:

MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>

Before posting, please take a moment to review the archives

at https://archive.midrange.com/midrange-l.<

https://shared.outlook.inky.com/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwxlpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg

Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:

support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.

[CAUTION! This email originated outside of the organization. Please do

not open attachments or click links from an unknown or suspicious origin.]

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx<mailto:

MIDRANGE-L@xxxxxxxxxxxxxxxxxx>

To subscribe, unsubscribe, or change list options,

visit: https://lists.midrange.com/mailman/listinfo/midrange-l<

https://shared.outlook.inky.com/link?domain=lists.midrange.com&t=h.eJw1zEEOwiAQheGrGNZSKK3YuvIqtIV20gEMDDHReHdF4_r973uykpBdDmwjuuWLEAiZcuNhSSastpmjF94AehO-EwQXxX_lyI4Httd73mMh7lIB4tFx2iy3JtEm1uyBtquL9MOklnLQJzV20sx20U7OfbtMSvat7QZ5Fq0elBzUqFXTj9W31V_vgFNJ4UqRDE7wcAUdIHobqLo1XD5hKIivN-AxRYo.MEQCIH0vfnM2X05BIsLu4qAn1AJt3RIia7OEyn1ed-p0eLq6AiAPDB6dlN_JkuY7_7nLjpmXvxLU_zviTPI8LzkGMebSjA

or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx<mailto:

MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>

Before posting, please take a moment to review the archives

at https://archive.midrange.com/midrange-l.<

https://shared.outlook.inky.com/link?domain=archive.midrange.com&t=h.eJw1jEsOgjAUAK9iurYfClZgxVVKP7ThQU151UTj3bUxLieZmRcpGch4IgHxdoyc62xCvDu2RZv1vjhm0sb_QIGR84msNTjWVJD6XCLS5CkGR53OGPhybBHD5BP-YqGE6NVFDq3QxlnlhekaO0vRNa7txZU3qpeil4OSrBvq39X_8ogwl7xPmFDDHJ--gI8Am9uxfqtov-JeAN4fW0w_xg.MEQCIAOGYopnq13zZ_dgsQhwxlpocwYE45L5BdlaFcqMa6yDAiB_u5Fv0u9b0xrLGKBaVThJ9vmqQxAmQl0GQJ_k81eUkg

Please contact support@xxxxxxxxxxxxxxxxxxxx<mailto:

support@xxxxxxxxxxxxxxxxxxxx> for any subscription related questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

--