QSECOFR not able to sign on

[Richard Knowley]

I'm setting up a new AS/400 for a customer, an I series, 9406-270.

I set the qsecofr password, and then restored the user profiles from
their old machine. I guess it restored the qsecofr password to what
it was on the old machine, which I don't know.

Like an idiot, I didn't realize this and now QSECOFR can't sign on.
My normal userid (which has secofr authority) can't sign on becuase of
an authority error (not authorized to userid qpgmr).

Any way to reset qsecofr and give it a new default password? Or any
other suggestions?

Thanks in advance for any help.

Richard Knowley
Klein Allen Company

-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 80,000 Newsgroups - 16 Different Servers! =-----

[burdee_vD]

Sure.

All you have to do is do an ATTENDED (manual) IPL with a console attached.
(Twinax device port 0, deviceadress 0, or dedicated PC console directly
attached)
So set the controlpanel in front of the AS/400 (iSeries?) to 01 B M or 01 A
M. (Achieving this with code 02)
Power-on the AS/400 and also the console.
Wait for the first display to arise. This is the "Install the system"
display.
Here you have the possibility to change the system, choose (I believe option
2) DST-menu. From there on you can change several things.

Good luck

Burdee

--

Bert van Dijk, IT dept.
Rotor b.v.
tel +31 545 464204
fax +31 545 475065
mailto:van...@rotor.nl
http://www.rotor.nl

"Richard Knowley" <r...@kleinallen.com> schreef in bericht
news:3b08a147...@GOLIATH.newsfeeds.com...

[burdee_vD]

I've just done an maual IPL on our testing system.

I found out I was wrong. Start the system (MANUAL IPL) and on the
display "Install the system" continue the IPL. Then a signon-display will
come; signon with a user / password you know. Then a display will come
"Select products to work with PTF's". Continue the IPL with F3.
The a display will come: "IPL Options". This is the display where you can
choose to change the system (userprofiles etc.) .

Hope to have helped you.

Burdee

--

Bert van Dijk, IT dept.
Rotor b.v.
tel +31 545 464204
fax +31 545 475065
mailto:van...@rotor.nl
http://www.rotor.nl

"burdee_vD" <van...@nospamrotor.nl> schreef in bericht
news:9eaaa3$1qdk$1...@thor.wirehub.nl...

[Marc Rauzier]

Richard Knowley racontait dans comp.sys.ibm.as400.misc:

Hello Richard

If you have restored all the user profiles (using the RSTUSRPRF *ALL)
then the password has been restored.
If you have restored only some user profiles, the password have *not*
been restored.
So you can try the two passwords ... at the console. Even if QSECOFR is
disabled, you can *allways* sign on at the console, of course if you
know the password.

If you do not remember the password, you can reset the shipped password
(QSECOFR) of the QSECOFR user profile, with the DST menu on a manual
IPL.

--
Cordialement/Best regards
Marc Rauzier

[Walter]

Power down, switch to "manual IPL" with the buttons on the control panel and
restart. A login screen will appear where you must use a password you can
get from IBM support (maybe the company where your customer bought the
machine must help to get it). In old days it was the same on every machine,
but I guess this is over.
Then you can change user passwords.

Other option: Format the disks and reinstall the operating system from CD

Walter

[Cor M. de Vries]

Hello Richard,
if you could find a free moment look at the Security Reference manual
SC41-5302. On the end of chapter 4 is a sections describing the procedure
to recover from a Lost QSECOFR password. These old fashion way of providing
information is still a valuable resource that should not be overlooked.

Richard Knowley <r...@kleinallen.com> wrote in article
<3b08a147...@GOLIATH.newsfeeds.com>...

[Jonathan Corr]

From an attended IPL go to DST (dedicated Service Tools) and enter the DST
user as QSECOFR with password of QSECOFR. This will reset the QSECOFR
password/account.

"Cor M. de Vries" <cor_d...@nl.ibm.com> wrote in message
news:01c0e1cc$8bda6e60$69ecef20@NL90651...

[Richard Knowley]

Follow up:

I was allset to try the manual IPL and sign on to DST as qsecofr, when
one of the people who knew the old qsecofr password came in.

Just for kicks, we tried the old password, and it worked!

Last night, I got the message that QSECOFR could not sign on no matter
which password I used, as if the QSECOFR user profile had been set to
disabled. Does this time out for the security officer profle?

Anyway, thanks for all the responses, it is very much appreciated.

Richard Knowley
Klein Allen Company

[Ugo Gagliardelli]

Richard Knowley wrote:
>
> I'm setting up a new AS/400 for a customer, an I series, 9406-270.
>
> I set the qsecofr password, and then restored the user profiles from
> their old machine. I guess it restored the qsecofr password to what
> it was on the old machine, which I don't know.
>
> Like an idiot, I didn't realize this and now QSECOFR can't sign on.
> My normal userid (which has secofr authority) can't sign on becuase of
> an authority error (not authorized to userid qpgmr).
>
> Any way to reset qsecofr and give it a new default password? Or any
> other suggestions?

You still be able to logon as QSECOFR from the console defined
workstation even if QSECOFR user profile was disabled.
--
Dr. Ugo Gagliardelli, Modena, Italy
Spaccamaroni andate a cagare/Spammers not welcome

[Bruce Orrell]

I was under the impression that QSECOFR is shipped (as are other Qx user
IDs) with a passowrd of *NONE! I think this was an early V4 change.

"Richard Knowley" <r...@kleinallen.com> wrote in message
news:3b0a33c...@GOLIATH.newsfeeds.com...

[Kirk Goins]

Think a second (tick tick tick) ok... QSECOFR password to *none... How would
anyone be able to INSTALL a fresh copy of the OS? QSECOFR is shipped with
QSECOFR as the password but is set to force the user to change it on the first
signon. Other passwords may be set to *none...