How to check IP address in system message ?

5 pts.
Tags:
IP address
QUSRWRK
Subsystem QUSRWRK disabled user profile ITUSER on device *N.
ASKED: May 19, 2009  4:22 PM
UPDATED: May 22, 2009  3:43 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

Can you provide the details of what application you are using please? Also version and patch level. Thanks!

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • PSMurray
    If the error is similar to below, then is is a user based error. Subsystem QINTER disabled user profile ALDON on device QPADEV0001. Subsystem QINTER varied off work station QPADEV0001 for user ALDON. Phil
    530 pointsBadges:
    report
  • harisudhan21
    I thought this has to do with the Invalid sign on attempts by the user, so whatsover is the AS400 ID we can easily find out the user name and trace his Comp.
    1,005 pointsBadges:
    report
  • Gilly400
    Hi, I think if you check the details of the message in the QHST log (using DSPLOG) it should tell you the IP address where the error originated. Regards, Martin Gilbert.
    23,730 pointsBadges:
    report
  • mcl
    You could also use the Audit Journal. At a minimum, you will need to have system value QAUDCTL set to *AUDLVL and QAUDLVL set to *AUTFAIL and *SECURITY. Easiest to set these from the security tools menu (GO SECTOOLS) Use option 12 on the security tools menu to copy the audit journal entries for for journal entry type "CP" and "PW". This will create two tables. The default is QAUDITCP and QAUDITPW in QTEMP). In QAUDITCP, any records where field CPSTAT="*DISABLED" will give you the User name in field CPONAM and the IP address in field CPRADR. But, that is only for a green-screen signon. If the user is disabled at the initial grey window (iSeries Access) the address may be blank. The PW records will give you any invalid password entries and invalid user account entries. In QAUDITPW , field PWUSRN is the user ID, PWTYPE is the type of error (P=Password, U=User Profile) and PWRADR is the IP Address. Simple enough to write a program to extract all that information. Hope this helps. Regards Mike
    2,740 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following