User profile being disabled

30 pts.
Tags:
AS/400
AS/400 user profiles
We have one user that is having issues with her profile being disabled. This only happens on Mondays, she signs in once, and it tells her she is disabled. I enable her, only to have this happen again the next Monday. I am not sure how to track this or where to look to correct. Thanks

Software/Hardware used:
iSeries OS V6R1
ASKED: January 29, 2013  5:02 PM
UPDATED: January 29, 2013  5:36 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

It seems that the problem is the expiration period that is being set for the profile.

To set up an AS/400 user ID to never expire, use the following steps.

1.) Sign on to the AS/400 as a security officer.

2.) Use the WRKUSRPRF command to find the user profile to update.

3.) Change the “Password expiration interval . . PWDEXPITV” parameter value to *NOMAX to tell the user profile to never expire.

    • Note: If your user profile is still expiring it’s possible the user profile is getting disabled by someone changing the password, entering an incorrect password 3 times or you may have a third-party security software product on your AS/400 system that is expiring the user passwords.
 

Discuss This Question: 8  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • philpl1jb
    The user id and old password may have been used in an autofill or macro on windows if that application was used in the startup to perhaps start a few sessions ... or perhaps the password and old id were used in some remote process.
    48,595 pointsBadges:
    report
  • TomLiotta
    To track it, use DSPAUDJRNE ENTTYP(CP) FROMTIME([date] [time]). Use the date and time of the last successful logon as the starting point. Scan the report to see where the user profile is referenced. Use the date and time from those entries to create DSPJRN commands for T/CP entries in the system audit journal, QAUDJRN.   Each T/CP entry for that user profile can be viewed to see which one shows the *DISABLED state change. That entry will tell exact date and time and the job that did it. Hard to say where to go from there without knowing those details.   Tom
    125,585 pointsBadges:
    report
  • TomLiotta
    I wouldn't expect the password expiration interval to be the problem. An expiration sometime in the past might have started the problem though. I wouldn't change the expiration interval for this user unless a connection can be clearly established. -- Tom
    125,585 pointsBadges:
    report
  • Amoore
    Thanks Tom, I will try what you suggested.  I appreciate the comments from everyone.
    30 pointsBadges:
    report
  • chalenger
    Also check The Display Activation Schedule (DSPACTSCD) command displays user  profiles with their enable and disable time, and the days the       profiles will be activated. Hassan
    455 pointsBadges:
    report
  • ToddN2000
    You might find some info if you DSPLOG  QHST to print and scan for the workstation ID or user profie.  Is this a shared profile? Is it always on Monday? Did they change the password on Friday and forgot it, so after a few attempts it was disabled?
    6,415 pointsBadges:
    report
  • Amoore
    I did locate in the History file, when the profile was disabled.  The strange thing is, it was at 3:09 Sunday morning.  We do an IPL every sunday morning at 2:00. At 3:09, everything is coming back up, jobs are starting, devices are being varied back on, and then I see the message that this particular profile has been disabled.  I know she isn't signing in at 3 in the morning.
    30 pointsBadges:
    report
  • Splat
    Is it possible you're running the Analyze Profile Activity (ANZPRFACT) at about that time?
    6,255 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following