Re: IBM User Profiles

Ah ha!

That is such an IBMism.

Thanks Jack.

Rich

________________________________


On 7/15/2024 9:31 AM, Jack Woehr via MIDRANGE-L wrote:

The YES in the column NO_PASSWORD_INDICATOR means "No Password".
In other words, YES means NO.

________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx><mailto:midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Rich Loeber <rich@xxxxxxxxx><mailto:rich@xxxxxxxxx>
Sent: Monday, July 15, 2024 7:12 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx><mailto:midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: IBM User Profiles

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

I'm looking at some recent IBM i documentation issued by IBM and I see the following statement:

"All IBM-supplied user profiles except for QSECOFR are shipped with a password of *NONE and are not intended for sign-on. These profiles are used by the IBM i operating system. Therefore, signing on with these profiles or using the profiles to own user (non-IBM supplied ) objects is not recommended."

After exploring the current settings on both a 7.4 and 7.5 box, I don't find this to be the case. Many IBM supplied profiles are there with a password present. Here's a brief example of the SQL output that I'm seeing:

Authorization No Status User
Name Password Class
Indicator Name
QANZAGENT YES *ENABLED *SYSOPR
QCLUMGT YES *DISABLED *USER
QCLUSTER YES *ENABLED *USER
QDIRSRV YES *ENABLED *USER
QIBMHELP YES *ENABLED *SYSOPR
QLPAUTO YES *ENABLED *SYSOPR
QLPINSTALL YES *ENABLED *SYSOPR
QPGMR YES *ENABLED *PGMR
QPM400 YES *ENABLED *USER
QRJE YES *ENABLED *PGMR
QSECOFR NO *ENABLED *SECOFR
QSRV YES *ENABLED *PGMR
QSRVAGT YES *ENABLED *SYSOPR
QSRVBAS YES *ENABLED *PGMR
QSYS YES *ENABLED *SECOFR
QSYSOPR YES *ENABLED *SYSOPR
QTCM YES *DISABLED *USER

Is this typical?

Or, is the IBM documentation that I'm look at (CIS IBM i V7R5M0 Benchmark) just incorrect.

Rich Loeber
Kisco Systems LLC