IBM Support

Logging in to IBM i OS Signon Screen via Telnet Session Fails with "Not Authorized to Work Station"

Troubleshooting


Problem

Logging in to IBM i OS Signon Screen via Telnet session fails with message CPF1110 - Not authorized to work station. Message CPF2241 - User profile not authorized to *DEVD was found in the IBM i OS QHST log.

Resolving The Problem

Logging in to IBM i OS Signon Screen via Telnet session fails with message CPF1110 - Not authorized to work station. Message CPF2241 - User profile not authorized to *DEVD was found in the IBM i OS QHST log.

The system value, QLMTSECOFR was set to a value of 1, Explicit device access needed. Therefore, the user profile attempting to allocate any IBM i OS device cannot do so if the profile has *ALLOBJ or *SERVICE special authority and the user profile does not have explicit authority to that device. Change the system value QLMTSECOFR to a value of 0, Explicit device access not needed, or give the user explicit authority to the specific device. This behavior is not specific to the Telnet Server mechanism used to access the IBM i OS Signon screen.

The system value can be changed using the following command:

CHGSYSVAL SYSVAL(QLMTSECOFR) VALUE('0')

Explicit authority to the device can be given using the following command:

GRTOBJAUT OBJ(devicename) OBJTYPE(*DEVD) USER(userprofile)

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.1.0"}]

Historical Number

21045621

Document Information

Modified date:
18 December 2019

UID

nas8N1017629