Hi,

I think you’ll need to re-ipl and do the CHGDSTPWD again, then reset the password on the user profile and make sure that the profile is *ENABLED.

I think the problem is that the password for the user profile is expired, this is not the same as the DST password being expired.

Regards,

Martin Gilbert.

Hello,

Accessing service tools using DST from the system control panel
To access service tools using DST from the control panel, complete the following steps:

Put the control panel in manual mode.
Use the control panel to select function 21 and press Enter. The DST Sign On display appears on the console.
Sign on to DST using your service tools user ID and password. The Use dedicated service tools (DST) display appears.
Select the appropriate option from the list and press Enter.
Select option 5 (Work with DST environment) to get to additional options for working with service tools user IDs.
Select option 7 (Start a service tool) to start any of the service tools available from DST.
Select any of the other options, as appropriate.

Hope this helps… You can also go to the following website for more information…

http://publib.boulder.ibm.com/infocenter/systems/scope/i5os/index.jsp?topic=/rzamh/rzamhresetdevidspwds.htm&resultof=

TPinky

Hi,

Just an idea…..

Have you tried typing the userid and password and pressing F5 instead of enter?

Have you tried pressing help/F1 on the message “password is correct but set to expired” – maybe there’s more information….

Regards,

Martin Gilbert.

Hi again,

Im getting the F5 key from HMC console, its one option there in hmc “open a deticated service tool” . After that the menu of DST is shown, after putting the QSECOFR uname and passwd, it shows: “password is correct but set to expired”
then when we try to F5 change password option we have “incorrect function key pressed”, thing that makes it strange for me. I checked also the characters maps on HMC but it seems ok.

As i know after reseting the dst password the next step is to access the option 21 of control panel, i knew this in old system with only one partition, but now we have 2 partitions on hmc, and im getting confused how to access the option 21 from HMC? Im not sure if the option “open a deticated service tool” is the right way?? I dont know what will happen if i enter an 21 in control panel?

Is any way how to reset without reipl ??? as its the production machine, that we have this problem.

Hi,

If you have access to the DST menu, try the following – note there’s an option to set password to expired yes/no :-

Start DST. 
Sign on to DST using your service tools user ID and password. The Use dedicated service tools (DST) display appears. 
Select option 5 (Work with DST environment) and press Enter. The Work with DST Environment display appears. 
From the Work with DST Environment display, select option 3 (Service tools user IDs) to work with service tools user IDs. The Work with Service Tools User IDs display appears. 
On the Work with Service Tools User ID display, find the user ID to change and type 2 (Change password) in the Option field. 
If you have the service tool security privilege that allows you to change other service tools user IDs, the Change Service Tools User Password for Another User display appears. The service tools user ID name is displayed. Verify that this is the user ID name you want to change. Complete the following fields: 
New password: Enter a new password. 
Set Password to expired: Type 1 (Yes) or 2 (No) in this field. The default value is 1 (Yes). 
If you do not have the system administrative privilege that allows you to change other service tools user IDs, the Change Service Tools User Password display appears. Complete the following fields: 
Current password: Enter the password currently in use for the service tools user ID. 
New password: Enter a new password. This password cannot be one of your 18 previous passwords for this service tools user ID. 
New password (to verify): Enter the new password again. 
Press Enter to complete the change. If your new password was not accepted, you may not have complied with the password policies for service tools user IDs. Review these policies and make sure you comply with them when choosing a service tools user ID password. 

Regards,

Martin.

Hi,

That last answer didn’t come through too well. Try going to This Site and do the Change service tools user IDs and passwords using SST or DST.

Regards,

Martin.

Hi again,

My BIG problem is that i cant access neither sst neither dst, i cant go in their menus, i had only one user profile and it has been expired or disabled. The only way that i have to follow is reseting DST password. After that i have to access the DST with function 21 control panel.
My question is since in my case i have an hmc, and 2 LPARS one V5R3 and other V5R4, what will happen if i will type function 21 in control panel? What partition will be dependent from control panel?

Thanks again for ur answers, hoping to get some idea…

Hi again,
Afraid I can’t help you on this – I still haven’t used HMC yet.
Regards,
Martin Gilbert.

It appens to me once.

There is a very lousy procedure that allow you to change SST dna DST password by pressing buttons on the AS/400 control panel but I think it is not documented on the Web. You should call your IBM support center explaining your problem and they will guide you throught the procedure on the phone.

I just dont remember if you have an IPL to do it…

Good luck !

_____________________
DanTheMan

The CHGDSTPWD is the correct procedure. The new “default” password for QSECOFR I believe is QSECOFR and it MUST be entered in all caps. Note thar this password IS case-sensitive, and NOT the same as the QSECODR profile used on the system. DST profiles are independent of the normal profiles. Since you are getting “password is correct but expired”, you prob have the right password. However, in DST there is an option to “allow user to change their expired or disabled password”. My guess is you have this set to *NO. I don’t know for sure if IPL will fix this (can you get to it from the 2nd LPAR?). I did have this problem myself, but was able to access with the 22222222 profile. The first thing I did when it worked again was to setup another profile in SST that could fix QSECOFR if needed.

QSECOFR often gets diabled in SST because (1) users forget that id NOT the same password as the QSECOFR profile, and (2) the password IS case-sensitive. I know all this is too late to help you today, as it seems you have tried almost everything. I think the option 21 procedure will work with multiple LPARs. Its worth a try. I can’t remember if I used it before or after adding the HMC. You may need to call IBM. I think they have a workaround.

Hello all,

The problem was at console i reseted the console conection with 65 + 21 + 21 and the password was changed successfully, for more details see the below link
http://publib.boulder.ibm.com/infocenter/systems/scope/hw/index.jsp?topic=/iphbx/troublesignon.htm

Anyway thank you all for ur suggestions.

Kind regard to all

Hi Infoko,

Thanks for letting us know what the problem was – you never know when it might be necessary.

Regards,

Martin.