AS/400 security

Authority Failure Events

Can someone tell me what is "Authority Failure Events" in AS400 security monitoring. How can I solve this problem?

View Answer   |  Aug 27 2008   8:31 AM GMT   |  asked by Ytlow
AS/400 security, Authority Failure Events

COGNOS/ AS400

One of our technicians is trying to install COGNOS on a PC with I-series driver asking for username and password. No one in the organization remembers the password. Is there a way to query a physical file? If so which file might that be?

Answer Question   |  Aug 20 2008   11:23 PM GMT   |  asked by Chardyjr
AS/400 security, Cognos

AS400 Security Matters

Just like to check-out with you. If the IBM Supplied user profiles default password is not changed but password set to *NONE, will it be possible that these user profiles be used by login on to the AS400 system, taking into consideration that the QSECOFR and DST are properly controlled?

View Answer   |  Aug 13 2008   6:28 AM GMT   |  asked by TechRay
AS/400 security, DST, QSECOFR

Resetting the DST QSECOFR password

I am building a Partition as part of a DR test on a 570. The partition I am building is running at V5R3 and I do not remember the DST QSECOFR password.How can I reset this, as I am not on a command line and so cannot use the CHGDSTPWD, and am not using LAN Console so can't use option 65?

View Answer   |  Aug 6 2008   9:40 PM GMT   |  asked by AS400 - Ask the Expert
AS/400 system administration, AS/400 security

Controlling access to WRKJOBSCDE

Our users need command-line access for a number of commands, but I don't want them to have access to the WRKJOBSCDE command. What is the best way to restrict access to a specific command like this? Thanks in advance...

View Answer   |  Jul 28 2008   9:02 PM GMT   |  asked by SBatSI
AS/400 security, AS/400 job scheduler, WRKJOBSCDE

WRKQRY Security Flaw / Users can Alter/ Replace Data in Production Files

Can a user change or replace data, members, or the file itself (a prodcution file in a production lib) using WRKQRY...??? I have an auditor who believes in the "Define the Query" display, 2nd to last option ("Select output type and output form") you can specify 3 in the output type (3 = datafile...

View Answer   |  Jul 24 2008   7:03 PM GMT   |  asked by Gambitt7
AS/400 security, Query, WRKQRY

AS400 Sign on

When you take "Run the same" to open a new session you have to retpe the user id twice on in a window and then on the green screen. Does anyone know of a way to bypass one of the signons? Thanks

View Answer   |  Jul 23 2008   8:22 PM GMT   |  asked by JAC
AS/400 security, AS/400 user permissions

iSeries audit log protection

How are iSeries audit logs protected (e.g., who can access them? Can they be changed?)

View Answer   |  Jun 26 2008   6:49 PM GMT   |  asked by AS400 - Ask the Expert
AS/400 security, AS/400 compliance, iSeries

User profiles

How can a person without *ALLOBJ authority display ALL user profiles?Thanks

View Answer   |  Jun 24 2008   12:15 AM GMT   |  asked by ATitus
AS/400 user profiles, AS/400 security

Force user signoff after a time limt (AS/400)

Is there some way to force users to signoff (endjob) after a specified time limit has expired. For example if I have been signed on for more than 8 hours this interactive job should end.

View Answer   |  May 15 2008   2:07 AM GMT   |  asked by Fujino
AS/400 security

QSECOFR password

Hi, i forgot my qsecofr password.any possiable way to know that password..please help me..Thanks in advance,Regards,baskar

View Answer   |  May 10 2008   11:46 AM GMT   |  asked by MQ admin
AS/400 Password Recovery, QSECOFR, AS/400 security

iSeries Object Authority vs. Menu Security

Hello,I am new to iSeries and OS/400. Here is my question:Let's say in a level 30 security environment, user access is controlled through a menu, which does not alow them to access any sensitive objects. But a number of sensitive objects have been assigned *ALL authority for *PUBLIC. Can these...

View Answer   |  May 8 2008   6:25 PM GMT   |  asked by Mimia
OS/400 and iSeries, iSeries security, AS/400 security

IFS Security

How do I secure my IFS on the AS400?

View Answer   |  Apr 28 2008   8:26 PM GMT   |  asked by Jhholmes
Integrated File System (IFS), AS/400 security, IFS

How Do I Move From AS400 Security Level 30 To 40?

I have reviewed system values for QAUDLVL and found the we have the appropriate values running. I have reviewed the journals that contain over 3 months of information and determined that we have no AF or J entries. Is this all I need to verify before I recommend that we move to level 40? I have...

View Answer   |  Apr 24 2008   3:43 PM GMT   |  asked by TitaniumFJ
AS/400 security, QAUDLVL, Security

User Signed on Notification

Hi. If a user profile already has a CL in the initial program to call parameter and that CL can't be modified to add a sndbrkmsg, is there another way to have a message sent to the admin that a specific user has just signed on to the iseries?

View Answer   |  Apr 22 2008   8:30 PM GMT   |  asked by Bsalley
AS/400, AS/400 security, SNDBRKMSG

how to prevent users from pc to use odbc

Hello, how can we stop a user say from a windows to use odbc to connect to the as400 server. I am looking more for setting up a block on the as400 machine rather than on the pc itself.thanks

View Answer   |  Apr 6 2008   3:37 AM GMT   |  asked by Chc225
ODBC, AS/400 security

Using Adopt Authority on a menu system that transfers to another job

I have a system with an old menu system that transfers the interactive job to another job. When you look at WRKACTJOB and see a + next to the interactive job, there are other jobs below this from the menu system. Does Adopt authority above the menu system follow down to the transferred jobs and...

View Answer   |  Mar 31 2008   8:43 PM GMT   |  asked by Lovemyi
AS/400, AS/400 security, iSeries

Adopt Authority of Files

I have been asked to secure a completely open system to the users for SOX and just good security practice. I have created a program to call the menu command with a profile with *ALLOBJ authority and specified *OWNER to adopt authority so we can take *ALLOBJ away from users so they only have the...

View Answer   |  Mar 26 2008   6:42 PM GMT   |  asked by Lovemyi
AS/400 security, AS/400 SOX, *ALLOBJ

Command Validation Program

We have a command validtion program for the STRSEU command which allows us to check who is opening a source member for editing and whether they are authorized to do so. We would like to extend that same functionality to the WDSc editors. Is there an exit point we could exploit for this?

View Answer   |  Mar 18 2008   6:06 PM GMT   |  asked by Triggerman400
STRSEU, WDSc, AS/400 security

Do API’s ‘QSYRUPWD’ and ‘QSYSUPWD’ work with QSECOFR user profile?

Our password maintenance programs, use API's 'QSYRUPWD' and 'QSYSUPWD'. They work a traet with standard profiles, but don't seem to work for user profile QSECOFR. (we also have a copy of this profile called WSECOFR and this doesn't work either).Is there a built-in 'block' on the QSECOFR profile...

View Answer   |  Mar 6 2008   4:08 PM GMT   |  asked by Rpm
QSYRUPWD, QSYSUPWD, AS/400 security