As400
Páginas: 888 (221836 palabras)
Publicado: 5 de junio de 2012
AS/400e
Security - Reference
V ersion 5
SC41-5302-04
AS/400e
Security - Reference
V ersion 5
SC41-5302-04
Note Before using this information and the product it supports, be sure to read the information in “Appendix H. Notices” on page 547.
Fifth Edition (May 2000) This edition replaces SC41–5302–03. This edition applies only to reduced instruction set computer (RISC)systems. © Copyright International Business Machines Corporation 1996, 2000. All rights reserved. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents
Figures . . . . . . . . . . . . . . . ix Tables . . . . . . . . . . . . . . . xi About Security - Reference (SC41-5302) xv
Who should read this book . . . . . . . .. xv Conventions and terminology used in this book . . xvi AS/400 Operations Navigator . . . . . . . . xvi Installing Operations Navigator subcomponents xvii Accessing AS/400 Operations Navigator . . . xviii Prerequisite and related information . . . . . xviii How to send your comments . . . . . . . . xviii
Chapter 3. Security System Values. . . 23
General Security System Values. . . . . . .. Allow Restoring of Security-Sensitive Objects (QALWOBJRST) . . . . . . . . . . . . Allow User Domain Objects (QALWUSRDMN) Authority for New Objects (QCRTAUT) . . . . Display Sign-On Information (QDSPSGNINF) . . Inactive Job Time-Out Interval (QINACTITV) . . Inactive Job Time-Out Message Queue (QINACTMSGQ) . . . . . . . . . . . Limit Device Sessions (QLMTDEVSSN) . . . . Limit Security Officer(QLMTSECOFR) . . . . Maximum Sign-On Attempts (QMAXSIGN) . . Action When Sign-On Attempts Reached (QMAXSGNACN) . . . . . . . . . . . Retain Server Security (QRETSVRSEC) . . . . Remote Sign-On Control (QRMTSIGN) . . . . Use Adopted Authority (QUSEADPAUT) . . . Security-Related System Values . . . . . . . . Automatic Device Configuration (QAUTOCFG) Automatic Configuration of Virtual Devices (QAUTOVRT). . . . . . . . . . . . Device Recovery Action (QDEVRCYACN) . . . Disconnected Job Time-Out Interval (QDSCJOBITV) . . . . . . . . . . . . Remote Service Attribute (QRMTSRVATR) . . . System Values That Apply to Passwords. . . . . Password Expiration Interval (QPWDEXPITV). . Minimum Length of Passwords (QPWDMINLEN) . . . . . . . . . . . Maximum Length of Passwords (QPWDMAXLEN) . . . . . . . . . . .Required Difference in Passwords (QPWDRQDDIF) . . . . . . . . . . . Restricted Characters for Passwords (QPWDLMTCHR) . . . . . . . . . . . Restriction of Consecutive Digits for Passwords (QPWDLMTAJC) . . . . . . . . . . . Restriction of Repeated Characters for Passwords (QPWDLMTREP) . . . . . . . . . . . Character Position Difference for Passwords (QPWDPOSDIF) . . . . . . . . . . . . Requirementfor Numeric Character in Passwords (QPWDRQDDGT) . . . . . . . Password Approval Program (QPWDVLDPGM) System Values That Control Auditing. . . . . . Auditing Control (QAUDCTL) . . . . . . . Auditing End Action (QAUDENDACN) . . . . Auditing Force Level (QAUDFRCLVL) . . . . Auditing Level (QAUDLVL) . . . . . . . . Auditing for New Objects (QCRTOBJAUD) . . . 23 24 25 25 26 26 27 28 29 29 30 30 31 32 3333 34 34 35 35 36 37 37 38 38 39 39 39 40 40 40 42 43 43 44 44 45
Summary of Changes . . . . . . . . xxi Chapter 1. Introduction to AS/400 Security . . . . . . . . . . . . . . . 1
Physical Security . . Keylock Security . . Security Level . . . System Values . . . User Profiles . . . Group Profiles . . . Resource Security . . Security Audit Journal C2 Security . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2 3 3 4 4 4 6 6
Chapter 2. Using System Security (QSecurity) System Values. . . . . . . 7
Security Level 10 . . . . . . . . . . . Security Level 20 . . . . . . . . . . . Changing to Level 20 from Level 10 . . . ....
Security - Reference
V ersion 5
SC41-5302-04
AS/400e
Security - Reference
V ersion 5
SC41-5302-04
Note Before using this information and the product it supports, be sure to read the information in “Appendix H. Notices” on page 547.
Fifth Edition (May 2000) This edition replaces SC41–5302–03. This edition applies only to reduced instruction set computer (RISC)systems. © Copyright International Business Machines Corporation 1996, 2000. All rights reserved. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents
Figures . . . . . . . . . . . . . . . ix Tables . . . . . . . . . . . . . . . xi About Security - Reference (SC41-5302) xv
Who should read this book . . . . . . . .. xv Conventions and terminology used in this book . . xvi AS/400 Operations Navigator . . . . . . . . xvi Installing Operations Navigator subcomponents xvii Accessing AS/400 Operations Navigator . . . xviii Prerequisite and related information . . . . . xviii How to send your comments . . . . . . . . xviii
Chapter 3. Security System Values. . . 23
General Security System Values. . . . . . .. Allow Restoring of Security-Sensitive Objects (QALWOBJRST) . . . . . . . . . . . . Allow User Domain Objects (QALWUSRDMN) Authority for New Objects (QCRTAUT) . . . . Display Sign-On Information (QDSPSGNINF) . . Inactive Job Time-Out Interval (QINACTITV) . . Inactive Job Time-Out Message Queue (QINACTMSGQ) . . . . . . . . . . . Limit Device Sessions (QLMTDEVSSN) . . . . Limit Security Officer(QLMTSECOFR) . . . . Maximum Sign-On Attempts (QMAXSIGN) . . Action When Sign-On Attempts Reached (QMAXSGNACN) . . . . . . . . . . . Retain Server Security (QRETSVRSEC) . . . . Remote Sign-On Control (QRMTSIGN) . . . . Use Adopted Authority (QUSEADPAUT) . . . Security-Related System Values . . . . . . . . Automatic Device Configuration (QAUTOCFG) Automatic Configuration of Virtual Devices (QAUTOVRT). . . . . . . . . . . . Device Recovery Action (QDEVRCYACN) . . . Disconnected Job Time-Out Interval (QDSCJOBITV) . . . . . . . . . . . . Remote Service Attribute (QRMTSRVATR) . . . System Values That Apply to Passwords. . . . . Password Expiration Interval (QPWDEXPITV). . Minimum Length of Passwords (QPWDMINLEN) . . . . . . . . . . . Maximum Length of Passwords (QPWDMAXLEN) . . . . . . . . . . .Required Difference in Passwords (QPWDRQDDIF) . . . . . . . . . . . Restricted Characters for Passwords (QPWDLMTCHR) . . . . . . . . . . . Restriction of Consecutive Digits for Passwords (QPWDLMTAJC) . . . . . . . . . . . Restriction of Repeated Characters for Passwords (QPWDLMTREP) . . . . . . . . . . . Character Position Difference for Passwords (QPWDPOSDIF) . . . . . . . . . . . . Requirementfor Numeric Character in Passwords (QPWDRQDDGT) . . . . . . . Password Approval Program (QPWDVLDPGM) System Values That Control Auditing. . . . . . Auditing Control (QAUDCTL) . . . . . . . Auditing End Action (QAUDENDACN) . . . . Auditing Force Level (QAUDFRCLVL) . . . . Auditing Level (QAUDLVL) . . . . . . . . Auditing for New Objects (QCRTOBJAUD) . . . 23 24 25 25 26 26 27 28 29 29 30 30 31 32 3333 34 34 35 35 36 37 37 38 38 39 39 39 40 40 40 42 43 43 44 44 45
Summary of Changes . . . . . . . . xxi Chapter 1. Introduction to AS/400 Security . . . . . . . . . . . . . . . 1
Physical Security . . Keylock Security . . Security Level . . . System Values . . . User Profiles . . . Group Profiles . . . Resource Security . . Security Audit Journal C2 Security . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2 3 3 4 4 4 6 6
Chapter 2. Using System Security (QSecurity) System Values. . . . . . . 7
Security Level 10 . . . . . . . . . . . Security Level 20 . . . . . . . . . . . Changing to Level 20 from Level 10 . . . ....
Leer documento completo
Regístrate para leer el documento completo.