• The Four Hundred
  • Subscribe
  • Media Kit
  • Contributors
  • About Us
  • Contact
Menu
  • The Four Hundred
  • Subscribe
  • Media Kit
  • Contributors
  • About Us
  • Contact
  • Scanning QSYSOPR for Selected System Messages

    May 11, 2005 Joe Hertvik

    In your article “Bullet-Proofing User Profiles,” you talk about scanning the QSYSOPR message queue. Is there a way to scan for selected system messages, such as failed sign-on attempts, or do you have to review your logs line by line? I suspect that I have a user who is deliberately disabling user profiles by typing in a garbage password three times in a row, but I can’t prove this is happening. Do you have any ideas?

    –Mike

    The simplest way to do this is to scan the system history log for message CPF2234, which tells you when a user tries to sign on with an invalid password. You can do this by entering the following Display Log command (DSPLOG) from a green-screen command line or from the command line utility in iSeries Navigator:

    DSPLOG MSGID(CPF2234)

    DSPLOG displays the System History log for your partition. The system log is an OS/400 message queue (object type *MSGQ) that contains a summary of different system activities, including system and job information, failed sign-on attempts, and other system messages. Running DSPLOG this way tells your system to filter the system log information so that you only see incorrect password attempts that are designated by message ID CPF2234, which is issued to the log every time a user tries to log on with an incorrect password. Message ID CPF2234 has the following format:

    Password from device & 1 not correct for user & 2

    In this message, the second listed parameter (&2) displays the name of the user who is trying to sign on to the system and the first parameter (&1) displays the workstation device that they are signing on from. This information should provide enough evidence to pinpoint when and where your invalid sign-ons are happening.

    By default, DSPLOG returns the requested information back to your display. You can also run the command to produce a printout of this information by entering it this way:

    DSPLOG LOG(QHST) OUTPUT(*PRINT) MSGID(CPF2234)

    The Output option (OUTPUT) can be set to provide more detailed printouts. By setting OUTPUT to *PRTWRP, each output line will be wrapped if its text does not fit on one line. Setting OUTPUT to *PRTSECLVL prints out both the first and second level text for the message, if that additional text is present. Unfortunately, IBM does not provide the option to send the output to a database file, which would come in handy for setting up a program to automate system log monitoring (although I believe there are vendors who offer this capability).

    DSPLOG also has options to display system log messages for a certain time period or for specific jobs. The option to display job messages is not as handy as you might like because you have to enter the specific job name, user name, and job number of each job you want to display messages for. IBM does not allow you to generically specify that you want to see all the messages for a particular user, which is unfortunate.


    Finally, if you just want to turn off the filtering and display all of today’s current messages, you can just run DSPLOG with its default parameters, like this:

    DSPLOG

    HTH

    –Joe

    Share this:

    • Reddit
    • Facebook
    • LinkedIn
    • Twitter
    • Email

    Tags:

    Sponsored by
    WorksRight Software

    Do you need area code information?
    Do you need ZIP Code information?
    Do you need ZIP+4 information?
    Do you need city name information?
    Do you need county information?
    Do you need a nearest dealer locator system?

    We can HELP! We have affordable AS/400 software and data to do all of the above. Whether you need a simple city name retrieval system or a sophisticated CASS postal coding system, we have it for you!

    The ZIP/CITY system is based on 5-digit ZIP Codes. You can retrieve city names, state names, county names, area codes, time zones, latitude, longitude, and more just by knowing the ZIP Code. We supply information on all the latest area code changes. A nearest dealer locator function is also included. ZIP/CITY includes software, data, monthly updates, and unlimited support. The cost is $495 per year.

    PER/ZIP4 is a sophisticated CASS certified postal coding system for assigning ZIP Codes, ZIP+4, carrier route, and delivery point codes. PER/ZIP4 also provides county names and FIPS codes. PER/ZIP4 can be used interactively, in batch, and with callable programs. PER/ZIP4 includes software, data, monthly updates, and unlimited support. The cost is $3,900 for the first year, and $1,950 for renewal.

    Just call us and we’ll arrange for 30 days FREE use of either ZIP/CITY or PER/ZIP4.

    WorksRight Software, Inc.
    Phone: 601-856-8337
    Fax: 601-856-9432
    Email: software@worksright.com
    Website: www.worksright.com

    Share this:

    • Reddit
    • Facebook
    • LinkedIn
    • Twitter
    • Email

    Computer Lab and BOSaNOVA Bolster Thin Clients Help/Systems New CSI Tracks Down Runaway Jobs

    Leave a Reply Cancel reply

Volume 5, Number 19 -- May 11, 2005
THIS ISSUE
SPONSORED BY:

Advanced Systems Concepts
WorksRight Software
Linoma Software

Table of Contents

  • Use Field Names for Column Headings
  • Viewing and Printing the Euro Symbol
  • Scanning QSYSOPR for Selected System Messages

Content archive

  • The Four Hundred
  • Four Hundred Stuff
  • Four Hundred Guru

Recent Posts

  • To Comfort The Afflicted And Afflict The Comfortable
  • How FalconStor Is Reinventing Itself, And Why IBM Noticed
  • Guru: When Procedure Driven RPG Really Works
  • Vendors Fill In The Gaps With IBM’s New MFA Solution
  • IBM i PTF Guide, Volume 27, Number 27
  • With Power11, Power Systems “Go To Eleven”
  • With Subscription Price, IBM i P20 And P30 Tiers Get Bigger Bundles
  • Izzi Buys CNX, Eyes Valence Port To System Z
  • IBM i Shops “Attacking” Security Concerns, Study Shows
  • IBM i PTF Guide, Volume 27, Number 26

Subscribe

To get news from IT Jungle sent to your inbox every week, subscribe to our newsletter.

Pages

  • About Us
  • Contact
  • Contributors
  • Four Hundred Monitor
  • IBM i PTF Guide
  • Media Kit
  • Subscribe

Search

Copyright © 2025 IT Jungle