Furthermore, the AUTOLOG permissions given to MAINT and OPERATOR are useless as a CLASS A user can XAUTOLOG anyone, that is, without an AUTOLOG record in the CP directory.
2007/10/9, David Boyes <[EMAIL PROTECTED]>: > > > I'll go one step further: how about a default of all userids except > > MAINT, OPERATOR, and CMSUSER (does that still ship on fresh system?) > > being LBYONLY, defaulting to MAINT as the user who can do LOGONBY. > > With all the service machine ids having AUTOLOG lines for AUTOLOG1, > OPERATOR and MAINT. > > Personally, I'd NOLOG CMSUSER. I can't think of the last time I've > actually used it. > > > Anyone who wants a different LOGONBY user (or additional users) should > > know which trivial XEDIT command will change that. > > Or should have a directory manager. > > Requirement? > > -- db > -- Kris Buelens, IBM Belgium, VM customer support