Auto start AS400 interactive session

670 pts.
Tags:
AS/400
AS/400 user profiles
AS400 DSPF
Hi, 

During EOD process, Admin screen gets logged off when QINTER is ended. When QINTER is started, I would like to know if there is any way by which Session is started automatically without any users intervention.
1

Answer Wiki

Thanks. We'll let you know when a new response is added.

Only security level 10 allowed a user to sign in to the system without a validated user id and password. I don’t think that level is even available anymore. 

The only thing I can think of off hand (and my recommendation on this is zero) is when QINTER starts, send a message to the workstation that would run a macro to sign on to the system. But the security risk I wouldn’t take.

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • ToddN2000
    I agree with Azohawk in everything he said. Not a good idea to have a session start and login automatically. It's a major security risk especially if it has ADMIN rights. f you ever have a system security audit and this is found, out heads will roll.
    132,840 pointsBadges:
    report
  • Splat
    You can create a seconday interactive subsystem - which wouldn't be affected by ending QINTER - & allocate the device to that subsystem. 

    Still & all, keeping an interactive session open all the time isn't recommended at all - @azohawk & @ToddN2000 have the right of it.
    12,885 pointsBadges:
    report
  • TheRealRaven
    Not running in QINTER is possibly the closest you'll get. But having an "ADMIN" account that opens a session without requiring a logon goes against all good practices.

    A device may be allocated for display use by a batch job (or by another interactive job). That allocated session will then run under the authority of the allocating job. Perhaps you could adapt that method. A job might auto-start when QINTER starts and allocate the "ADMIN" device for use.

    What activities does "ADMIN" perform? Is this a physical terminal or an emulation session?
    35,130 pointsBadges:
    report
  • GregManzo
    We have a QINTER2 subsystem which EoD starts just before ending QINTER. It's there specifically so that IT staff can get into the system if there is a problem during day end.
    That said, it would require some sort of macro running on the PC to auto-logon - and that's not something I want to explore. Ask yourself: would you willingly leave a session signed on 24/7? It's pretty much the same thing.
    2,960 pointsBadges:
    report
  • as400dev
    Thanks Everyone. Considering the Security issue, its better not to implement it. 
    670 pointsBadges:
    report
  • ToddN2000
    It's not worth the security risk for automating a 10 seconds login process..Is there a particular reason for wanting to leave an open logon? Is it the person who needs to do work does not have authority to use that login ?
    132,840 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: