AS/400 User Profiles

pts.
Tags:
AS/400
Auditing
For auditing purposes, I need to find out what workstation a password was changed on. When you dspusrprf it shows the date it was changed and the date and time last logged. I would assume the workstation information must be there somewhere. Does anyone know how I could find this?

Answer Wiki

Thanks. We'll let you know when a new response is added.

Check out “iSeries Tips and Tools for Securing Your iSeries Version 5″ (SC41-5300-06) at

http://publib.boulder.ibm.com/iseries/v5r2/ic2924/books/c4153006.pdf

Look at the “Monitor user profile activity” topic on p.85. I think you can do what you want.

====================================================

See the Security Reference Appendix F for CP (User Profile Changes) audit journal entries. Review entries with the Command Name field value ‘CHG’ and Password Changed value ‘Y’.

Tom

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Teandy
    If you have auditing turned on, you can use the CPYAUDJRNE command to find out who made the change, when the change was made, what was changed and the IP address of the machine where the change was made.
    5,860 pointsBadges:
    report
  • TomLiotta
    Note that the password might not have been changed from any workstation at all. A CHGUSRPRF command can be submitted by itself to batch or be run compiled in a program. A chain that leads to a source can be tricky. Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following