Home > IT Answers > AS/400 > DST & Qsecofr password Reset
kingstoniseries
200 pts.
 DST & Qsecofr password Reset
AS/400, AS/400 Password Recovery, AS/400 passwords, DST, QSECOFR
hi, anyone help how to reset the Qsecofr usrprf id & Dst Id if Disabled. thanks kingston

Software/Hardware used:
ASKED: March 31, 2011  3:36 AM
UPDATED: April 4, 2011  8:37 PM
RELATED QUESTIONS
Answer Wiki:
Use the CHGDSTPWD command and change to * DEFAULT which will make password QSECOFR. You should than be able to sign on and change.
Last Wiki Answer Submitted:  April 1, 2011  2:46 pm  by  Bmangan   275 pts.
All Answer Wiki Contributors:  Bmangan   275 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 
DanTheDane
 2,540 pts.
 

hi, Mr bmangan,
Thanks for your support, I knw this answer but my question is if DST&QSECOFR both password will be disabled what will be Do. and i dont have the Qsecofr equal rights authority user. at the same time i cant go to os installation way also. pls help any other way is there.

Advance thanks
kingston

kingstoniseries
 200 pts.
 

The document from DanTheDane contains instructions to go to this document in your case — Resetting QSECOFR Password Using DST – Version 5.

If you can’t use that procedure, IBM is probably the only direction for you to go.

Tom

TomLiotta
 108,260 pts.
 

Create a program to change the QSECOFR password and enable it. Change the owner of the program to be QSECOFR and have the authority to just a couple of users to run it. This way only a known list of users have access to a program which can reset QSECOFR. You can also make a user which will call that program and sign off.

MDratwa
 645 pts.
 

Change the owner of the program to be QSECOFR and have the authority to just a couple of users to run it.

This is a good suggestion for a way to help avoid the problem in the future. But note that it won’t help with the current problem. If no profile exists that has the authority to re-enable QSECOFR, then there is similarly no current profile with the authority to assign ownership of a USER(*OWNER) program to QSECOFR.

But for the current problem, is it clear to kingston that a disabled QSECOFR can always sign on to the system console as long as the password is known? Physical access to the console provides “physical” security. Once signed on at the console with QSECOFR, the CHGUSRPRF command can re-enable QSECOFR.

Tom

TomLiotta
 108,260 pts.