IBM Power Ideas Portal
This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
Shape the future of IBM!
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Search existing ideas
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,
Post your ideas
Post an idea.
Get feedback from the IBM team and other customers to refine your idea.
Follow the idea through the IBM Ideas process.
Specific links you will want to bookmark for future use
Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.
IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.
ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.
Thank you for submitting this request.
We understand that it is frustrating when there is a password mismatch and the NetServer user on the IBM i can be easily disabled. This is especially true when the client will make several attempts automatically. However, an automatic re-enablement of the NetServer user (or any user) by the system can present another serious security concern in that it would open a window for an attacker. We are declining this request.
There are other options administrators can use to avoid users being disabled or to emulate the requested function and have been suggested in the comments. The other options include Single signon/EIM support, writing your own monitor, or setup a system monitor for MSGCPIB682 (User profile &1 disabled for IBM i Support for Windows Network Neighborhood access.).
Due to processing by IBM, this request was reassigned to have the following updated attributes:
Brand - Servers and Systems Software
Product family - Power Systems
Product - IBM i
Component - IFS (Integrated File System) and Servers
Operating system - IBM i
Source - None
For recording keeping, the previous attributes were:
Brand - Servers and Systems Software
Product family - Power Systems
Product - IBM i
Component - Security
Operating system - IBM i
Source - None
IBM has received the requirement and is evaluating it. IBM will provide a response after evaluation is complete.
Thank you for the comments.
I will talk with my colleague about watches.
Hi, you might check out this code for creating your own ideas :
CL Program "PWDERROR"
***************** Datenanfang *********************************
0001.00 PGM PARM(&OPTION &ID &ERROR &DATA)
0002.00
0003.00 DCL VAR(&OPTION) TYPE(*CHAR) LEN(10)
0004.00 DCL VAR(&ID) TYPE(*CHAR) LEN(10)
0005.00 DCL VAR(&ERROR) TYPE(*CHAR) LEN(10)
0006.00 DCL VAR(&DATA) TYPE(*CHAR) LEN(255)
0007.00 DCL VAR(&SHORT) TYPE(*CHAR) LEN(50)
0008.00
0009.00 CHGVAR VAR(&SHORT) VALUE(%SST(&DATA 1 50))
0010.00 SNDMSG MSG(&SHORT) TOUSR(QSECOFR)
0011.00
0012.00
0013.00 ENDPGM
compile, then
STRWCH SSNID(*GEN) WCHPGM(yourlib/PWDERROR) WCHMSG((CPIB682))
Hi Peder
Following on from Rudi's comment: IBM i has a function called a "watch", you can use the STRWCH command to run a bespoke a CL program that you create whenever this message appears. This CL can then re-enable the user and I would also suggest:
That it logs the IP address of the problem device and reports it to the SysAdmin so that they can find the PC and address the issue.
That you add a delay timer in the job so that you don't end up with many watches firing as the mapped network drive automatically attempt to reconnect over and over again.
I hope this helps.
Steve Bradshaw
IBM Champion, Member of the CEAC and TD oi-UG.co.uk
Single sign on is not an option at the moment for different causes.
Hello Peder,
What you want can be achieved with a message monitor in Nav4i. You can set a trigger on the message id CPIB682 and some additional programming needs to be done.
So there is a work around for the time being. In case you really need this upfront.
I must admit that the suggestion of pniclolay is however is a better one. SSO/EIM solves all this. If it is only one domain you are dealing with, settings this up can be done in one day or even less.
Greetings Rudi
I'd suggest configuring Single Sign On... it will solve all these issues.