My iseries id gets disabled frequently.

1,160 pts.
Tags:
iSeries security
Passwords
My iseries id gets disabled frequently. when i check the log it gives me following message.

Message ID . . . . . . :   CPIAD0B       Severity . . . . . . . :   00         Message type . . . . . :   Information                                         Date sent  . . . . . . :   23/03/10      Time sent  . . . . . . :   14:44:58                                                                                  Message . . . . :   *SIGNON server job 655952/QUSER/QZSOSIGN processing          request for user ITJOHN on 23/03/10 14:44:58 in subsystem QUSRWRK in QSYS.   Cause . . . . . :   The *SIGNON server is processing request 1 for user          ITJOHN.  The types of requests supported are as follows:                         1 -- Retrieve Signon Information                                               2 -- Change Password                                                           3 -- Generate Authentication Token                                             4 -- Generate Authentication Token on Behalf of Another User                   5 -- Start Server                                                         

 

After this is processed the id status shows as disabled.  Why is this happening?



Software/Hardware used:
os400 as400 iseries
ASKED: March 23, 2010  9:30 AM
UPDATED: March 26, 2010  7:12 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

This could occur when entering an invalid password when using ODBC.

============================================================

<i>After this is processed the id status shows as disabled. Why is this happening?</i>

If that is the precise sequence (i.e., after the message appears the user ITJOHN is disabled but was enabled before the message), then the password that was supplied for ITJOHN was incorrect.

It might be ODBC, or it might be iSeries Navigator, or it might be any iSeries Access function that uses the Signon Server. (It could even be a 3rd-party product or home-grown, as long as authentication is through the Signon Server.)

The message ID CPIAD0B is simply the Signon Server reporting that it has been contacted to “Retrieve Signon Information” for ITJOHN. Whatever process was started on (almost certainly) a client PC in the name of ITJOHN requested a logon approval and was denied. Your system audit journal should contain more detail about why.

The most common reason might be a NetServer (e.g., Windows mapped drive) that is using a wrong password, perhaps a Windows password rather than the AS/400 password. However, many other possibilities exist.

Tom

Discuss This Question: 7  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Obierun
    It looks like the user id is already disabled when you are receiving this message. What kind of a connection are we working with here? I am thinking that is a Client Access Server request to sign on. Do you have a prefilled user id and password set up? Do you have some messages immediately before this saying the user id information is incorrect?
    60 pointsBadges:
    report
  • Whatis23
    Have you changed your password recently and if so does the error coincide with that? We had an issue were another developer was using someone's id as a service account. His process failed when that id's password was changed. We were fortunate that our log had the ip addresses where the user id had been logging into for weeks. In any event, verify your own iNav seesion has the correct paasword.
    5,665 pointsBadges:
    report
  • JohnsonMumbai
    I used to save my password for my i series connection on my client. But this i have stopped since i encountered this error and iam forced to input my password for every connection. Since no ip is being mentioned. Iam unable to find where this is happening. Also if it is being used for odbc, which i have not set, but still iam unable to find where it is happening, hence i have to get my id enabled every time i logoff.
    1,160 pointsBadges:
    report
  • WoodEngineer
    The most common reason this happens in our shop is a saved password.
    6,035 pointsBadges:
    report
  • BigKat
    Hi JM, Windows can be tricky about storing passwords and providing them for you later. Most often it is mapped drives and file shares. Also ODBC connections, (but you already said you don't have that set). Also, do you have any processes that connect from another system to this one?
    7,565 pointsBadges:
    report
  • TomLiotta
    ...but still iam unable to find where it is happening,... That is probably true. You could only find out when it happened and possibly where (source IP address) the request came from. A PW entry in the system audit journal would log those and other elements. Like all sockets connections, the Signon Server has no way to know what process on your PC contacted it. It can only know the remote address. You might be able to clear cached passwords from your PC by running the CWBLOGON command in a PC command window. Run CWBLOGON /? to see a description of the command parameters, including how to clear the cache for a specific system and user. Tom
    125,585 pointsBadges:
    report
  • JohnsonMumbai
    Thanks very much the command CWBLOGON /c did the job.
    1,160 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following