iSeries NetServer security: Guest versus non-Guest

When using iSeries NetServer™, normal iSeries user profiles and passwords apply. By default, only users with valid iSeries user profiles and passwords can access resources on the iSeries. Windows 2000, Windows XP, and Windows Server 2003 offer the option to select a different userid. If the passwords do not match, you will see a password window. Windows will optionally remember the password.

An iSeries user profile is disabled from using iSeries NetServer when the user has tried to access iSeries NetServer a number of times with an incorrect password. An iSeries system value name, QMAXSIGN, specifies how many unpermitted access attempts disable a user profile. The Windows operating system will try access again when denied. So it may appear that the QMAXSIGN limit is reached before the number of times actually tried by the client. If the user profile does become disabled for iSeries NetServer, you can use one of several methods to re-enable the user profile. See Enable a disabled user profile for more information.

If a user profile is not found that matches the userid that is used to access iSeries NetServer, you may use an optionally configurable guest user profile. This guest, created by the iSeries administrator who has *SECADM special authority, should only have a password if guest print sharing is being used, and must not have any special authorities. The guest user profile allows iSeries file and print sharing by users who otherwise would not require an iSeries user profile.

Note:
The guest user profile must have a password if it is to be used for accessing print shares because the Network Print Server requires one.