Comments on: client access from p/c to AS400 signon screen

By: tomliotta

tomliotta — Thu, 19 Aug 2010 00:48:14 +0000

In case you have a way to make use of it, a disabled profile can be re-enabled with:

CHGUSRPRF myusrprf  STATUS(*ENABLED)

That would re-enable a profile named MYUSRPRF, both for normal workstation access and for the additional NetServer “Network Neighborhood” condition.

Beyond that, the comment from Batman47 about ‘Auto-reconnect’ is a reasonable possibility. Whether you want ‘Prompt every time’ or a different choice will depend on how other parts of iSeries Access are used and various circumstances. But ‘Auto-reconnect’ can be annoying in many environments.

Tom

By: batman47

batman47 — Wed, 18 Aug 2010 20:52:27 +0000

Look at the PC5250 configurations and see if ‘Auto-reconnect’ is set. Then check the properties of the connection and select the Connection tab. If anything other than ‘Prompt every time’ is checked, then the incorrect password maybe cached and had tried repeatedly to sign in. Check your QMAXSIGN system value for maximum signon attempts and then your QMAXSGNACN system value to see what action is being taken. Most likely it’s set to either 2 or 3 which would disable the profile. I would avoid using ‘Auto-reconnect’ and anything other than ‘Prompt every time’ on your configurations.

By: dataadmin

dataadmin — Wed, 18 Aug 2010 15:00:49 +0000

Whatever the user did, disables their user ID and we have to reset the user ID. They use the reset user ID to get log on again and then they have to changed their password.

Here are the messages sent to QSYSOPR as information only.

Subsystem HOMEINTER disabled user profile ACCT_DKH on device ETAR01S2.

Subsystem QUSRWRK disabled user profile IN_VA on device *N.

User profile ACCT_TF disabled for iSeries Support for Windows Network
Neighborhood access.

By: tomliotta

tomliotta — Wed, 18 Aug 2010 00:57:30 +0000

We have to do a password reset for USER ID.

I’m not sure what that means. Does it mean that you don’t know how to re-enable them without changing their passwords? Or does it mean that re-enabling doesn’t work, and you have to change passwords before access works?

Tom