118 lines
6.9 KiB
HTML
118 lines
6.9 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="concept" />
|
|
<meta name="DC.Title" content="Enable a disabled user profile" />
|
|
<meta name="abstract" content="This topic describes how to enable a disabled user profile, explains why it is important, and provides step-by-step instructions." />
|
|
<meta name="description" content="This topic describes how to enable a disabled user profile, explains why it is important, and provides step-by-step instructions." />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvmanagesecinfo.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvuserprof.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="enabledisableduserprof" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Enable a disabled user profile</title>
|
|
</head>
|
|
<body id="enabledisableduserprof"><a name="enabledisableduserprof"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Enable a disabled user profile</h1>
|
|
<div><p>This topic describes how to enable a disabled user profile, explains
|
|
why it is important, and provides step-by-step instructions.</p>
|
|
<p>If the QMAXSIGN and QMAXSGNACN system values on your system are set up
|
|
to disable a user profile after too many signon attempts, you may want someone
|
|
like a system operator to enable the profile by changing the status to *ENABLE.
|
|
However, to enable a user profile, you must have *SECADM special authority
|
|
and *OBJMGT and *USE authority to the user profile. Normally, a system operator
|
|
does not have *SECADM special authority. </p>
|
|
<div class="p">A solution is to use a simple program which adopts authority: <ol><li>Create a CL program owned by a user who has *SECADM special authority
|
|
and *OBJMGT and *USE authority to the user profiles on the system. Adopt the
|
|
authority of the owner when the program is created by specifying USRPRF(*OWNER).</li>
|
|
<li>Use the EDTOBJAUT command to make the public authority to the program
|
|
*EXCLUDE and give the system operators *USE authority.</li>
|
|
<li>The operator enables the profile by entering: <samp class="codeph">CALL ENABLEPGM <var class="varname">profile-name</var></samp></li>
|
|
<li>The main part of the ENABLEPGM program looks like this: <pre>PGM &PROFILE
|
|
DCL VAR(&PROFILE) TYPE(*CHAR) LEN(10)
|
|
CHGUSRPRF USRPRF(&PROFILE) STATUS(*ENABLED)
|
|
ENDPGM</pre>
|
|
</li>
|
|
</ol>
|
|
</div>
|
|
<p><strong>Listing User Profiles</strong> </p>
|
|
<p>You can display and print information about user profiles in a variety
|
|
of formats. Displaying an Individual Profile To display the values for an
|
|
individual user profile, use option <strong><kbd class="userinput">5</kbd></strong> (Display)
|
|
from either the Work with User Enrollment display or the Work with User Profiles
|
|
display. Or, you can use the Display User Profile (DSPUSRPRF) command. </p>
|
|
<p><strong>Listing All Profiles</strong> </p>
|
|
<p>Use the Display Authorized Users (DSPAUTUSR) command to either print or
|
|
display all the user profiles on the system. The sequence (SEQ) parameter
|
|
on the command allows you to sort the list either by profile name or by group
|
|
profile.</p>
|
|
<pre class="screen"> Display Authorized Users
|
|
|
|
Password
|
|
Group User Last No
|
|
Profile Profile Changed Password Text
|
|
DPTSM
|
|
ANDERSR 08/04/0x Anders, Roger
|
|
VINCENT 09/15/0x Vincent, Mark
|
|
DPTWH
|
|
ANDERSR 08/04/0x Anders, Roger
|
|
HOGANR 09/06/0x Hogan, Richard
|
|
QUINN 09/06/0x Quinn, Rose
|
|
QSECOFR
|
|
JONESS 09/20/0x Jones, Sharon
|
|
HARRISON 08/29/0x Harrison, Ken
|
|
*NO GROUP
|
|
DPTSM 09/05/0x X Sales and Marketing
|
|
DPTWH 09/18/0x X Warehouse</pre>
|
|
<p>By pressing <span class="uicontrol">F11</span>, you are able to see which user
|
|
profiles have passwords defined for use at the various password levels.</p>
|
|
<pre class="screen"> Display Authorized Users
|
|
|
|
Password Password Password Password
|
|
User Group Last for level for level for
|
|
Profile Profile Changed 0 or 1 2 or 3 NetServer
|
|
ANGELA 04/21/0x *YES *NO *YES
|
|
ARTHUR 07/07/0x *YES *YES *YES
|
|
CAROL1 05/15/0x *YES *YES *YES
|
|
CAROL2 05/15/0x *NO *NO *NO
|
|
CHUCKE 05/18/0x *YES *NO *YES
|
|
DENNISS 04/20/0x *YES *NO *YES
|
|
DPORTER 03/30/0x *YES *NO *YES
|
|
GARRY 08/04/0x *YES *YES *YES
|
|
JANNY 03/16/0x *YES *NO *YES</pre>
|
|
<p><strong>Types of User Profile Displays</strong> </p>
|
|
<div class="p">The Display User Profile (DSPUSRPRF) command provides several types of
|
|
displays and listings: <ul><li>Some displays and listings are available only for individual profiles.
|
|
Others can be printed for all profiles or a generic set of profiles. Consult
|
|
online information for details about the available types.</li>
|
|
<li>You can create an output file from some displays by specifying <samp class="codeph"><var class="varname">output</var>(*OUTFILE)</samp>.
|
|
Use a query tool or program to produce customized reports from the output
|
|
file.</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvmanagesecinfo.htm" title="This article describes the tasks for managing security information.">Manage security information</a></div>
|
|
</div>
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
|
<div><a href="rzamvuserprof.htm" title="Every system user must have a user identity before they can sign on to and use a system. This user identity is called a user profile.">User profiles</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |