AS/400 User Profiles
0 pts.
0
Q:
AS/400 User Profiles
For auditing purposes, I need to find out what workstation a password was changed on. When you dspusrprf it shows the date it was changed and the date and time last logged. I would assume the workstation information must be there somewhere. Does anyone know how I could find this?
ASKED: May 12 2005  12:25 AM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
0
8025 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
Check out "iSeries Tips and Tools for Securing Your iSeries Version 5" (SC41-5300-06) at

http://publib.boulder.ibm.com/iseries/v5r2/ic2924/books/c4153006.pdf

Look at the "Monitor user profile activity" topic on p.85. I think you can do what you want.

====================================================

See the Security Reference Appendix F for CP (User Profile Changes) audit journal entries. Review entries with the Command Name field value 'CHG' and Password Changed value 'Y'.

Tom
Last Answered: Oct 25 2009  10:24 AM GMT by TomLiotta   8025 pts.
Latest Contributors: jaicee   0 pts.
0
0
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Teandy   3250 pts.  |   Oct 26 2009  4:33PM GMT

If you have auditing turned on, you can use the CPYAUDJRNE command to find out who made the change, when the change was made, what was changed and the IP address of the machine where the change was made.

 
0