Comments on: How to change number of failed login attempts for one user ID http://itknowledgeexchange.techtarget.com/itanswers/how-to-change-number-of-failed-login-attempts-for-one-user-id/ Tue, 18 Jun 2013 21:45:09 +0000 hourly 1 By: tomliotta http://itknowledgeexchange.techtarget.com/itanswers/how-to-change-number-of-failed-login-attempts-for-one-user-id/#comment-69179 tomliotta Sat, 17 Oct 2009 10:23:23 +0000 #comment-69179 Since the “failed attempts” means “failed sequential attempts”, it’s not clear what difference it makes that this is a shared profile.

The limit on attempts is more important for a shared profile than for an individual and should not be extended. Why allow a profile that may be widely known to have even more opportunities?

Tom

]]> By: splat http://itknowledgeexchange.techtarget.com/itanswers/how-to-change-number-of-failed-login-attempts-for-one-user-id/#comment-65086 splat Fri, 03 Jul 2009 15:27:27 +0000 #comment-65086 If you’ve built the QSYSMSG message queue in QSYS, you can build a program to monitor for the generic profile. You could monitor QSYSOPR, but I wouldn’t recommend it – too much overhead for little purpose. Better to build the QSYSMSG message queue. When you detect a CPF1393 for that profile, you can execute a CHGUSRPRF command from your monitor program (make sure to create it with sufficient authority) to re-enable the profile.

I haven’t done a message queue monitor program in ages, so I can’t give you much help with the details.

]]> By: ronbender http://itknowledgeexchange.techtarget.com/itanswers/how-to-change-number-of-failed-login-attempts-for-one-user-id/#comment-65047 ronbender Thu, 02 Jul 2009 14:46:13 +0000 #comment-65047 The number of invalid sign-ons is a system value so it is all or nothing in this case.

If you have a 24 hour help desk, you can train the operators to reset profiles. I’m afraid that if you did, you would have thought of that already.

Keep the discussions.

]]>