QSECOFR user profile is not allowed in TCP/IP socket mode!

85 pts.
Tags:
.OST files
AS/400
AS/400 user profiles
i5/OS
QSECOFR
TCP/IP
I am getting an error message when I try to connect to the i5 with a Windows based query application. QSECOFR user profile is not allowed in TCP/IP socket mode! I read a couple of articles, it might has something to do with an FTP restriction on i5 side. Could anyone point me to right direction? I also tried another profile which has higher authority level than the QSECOFR profle(QSECADM). I am getting another communication error message: ICASRV subsystem not loaded on AS/400, server address 192.168.1.15! Any suggestions. Thanks in advance.

Software/Hardware used:
AS400, iServer, i5/OS

Answer Wiki

Thanks. We'll let you know when a new response is added.

Read this excerpt from IBM:

http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp?topic=/rzahl/rzahltrblfileshare.htm

As for the ICASRV subsystem not loaded on AS/400, that is a Bravo Express error which is just a IFS gui software.

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TomLiotta
    Various questions -- I am getting an error message when I try to connect to the i5 with a Windows based query application. QSECOFR user profile is not allowed in TCP/IP socket mode! First, is that the error message that you see ("QSECOFR user...")? How do you see it? I'd guess in a popup message box, but maybe not. What is the "query" application? Are you attempting to use SQL to retrieve rows from tables? I ask because of your next statement: ...it might has something to do with an FTP restriction on i5 side. A FTP restriction shouldn't have any connection to a "query" application that uses SQL. This might be misleading everyone and might need to be ignored. I also tried another profile which has higher authority level than the QSECOFR profle(QSECADM). No profile can have 'higher authority' than QSECOFR. You aren't even allowed to remove any of the special authorities of QSECOFR. Technically, it's probably a good idea that QSECOFR is restricted. QSECOFR should be reserved only for cases where IBM instructions direct you to use it. There is an extra risk of damage to the profile when it is in use (via power outages, hardware failures, etc). Recovery from damage to QSECOFR can be a difficult process, especially at sites where secondary security officer profiles haven't been created. And if secondary security officers have been created, then they should be used rather than QSECOFR. Tom
    125,585 pointsBadges:
    report
  • graybeard52
    Tom is right. IMHO, you should NEVER use QSECOFR for anything after the first OS install. Create another user ID, give it OSECOFR rights ( if you really, really have to ), and use that profile.
    3,115 pointsBadges:
    report
  • Gmil494
    QSECOFR profile has the highest authority (can disable/enable/delete/add, etc any and all user ID/profiles). I'm not 100% sure this is the reason/answer, as I am using local TCP/IP when using the QSECOFR profile and I have no problems, but could it be that when the machine was installed/configured that (I can't think of the value/configuration name it is in a "Q" value file in the machine, I believe it is possible to disallow QSECOFR profile accessing the AS/400 on any terminal other than a hardwired, twinax 5250 terminal locally connected to the machine (in computer room, or near the machine).
    365 pointsBadges:
    report
  • Chabsta
    I ended up resolving this issue. I installed OLE DB driver and a couple of libraries on i5 via pc regarding to this new software I started to use. Both installer were using Bravo Express. It is an enterprise reporting software using custom variables and queries to mine spool files out of the i5. All is well now. I was informed that the new software I am using not allowing to use the QSECOFR profile anyway. I was battling with multiple issues. I will stay away from using QSECOFR for anything. My authority level is SECADM anyway. Thanks for all the input.
    85 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following