Security and QSECOFR number of sign-ons
For security purposes, the number of sign-on attempts can be *NOMAX or as few as one. I configured for 3 maximum sign-ons. Does anyone know if the OS/security sums the total number of sign-on attempts from the device only before it disables the device, or does the OS not count total from the device, but total for the userID/profile before it disables the device (terminal)?
Software/Hardware used:
Software/Hardware used:
ASKED:
June 3, 2012 10:21 PM
UPDATED:
June 4, 2012 6:10 AM
Answer Wiki:
Last Wiki Answer Submitted:
Be the first to answer this question.
All Answer Wiki Contributors:
Be the first to answer this question.
To see all answers submitted to the Answer Wiki: View Answer History.
The QMAXSGNACN system value can control two separate elements — profiles and workstation devices. Invalid signons are tracked separately for them.
Assuming QMAXSGNACN = ’3′ and QMAXSIGN = 3 –
If you try three different profiles at the same workstation unsuccessfully, the workstation is varied off. None of the profiles is disabled. Each profile has one unsuccessful attempt logged against it.
If you try one profile against three different devices unsuccessfully, the profile is disabled. None of the devices is varied off. Each device has one unsuccessful attempt logged against it.
Unsuccessful logons do not have to be attempted through workstation devices. FTP, iSeries Navigator and other network connections can disable profiles without any effect against devices.
Tom