IBM Support

Logging in to IBM i OS Signon Screen via Telnet Session Fails with "Not Authorized to Work Station"

Technote (troubleshooting)


Problem(Abstract)

Logging in to IBM i OS Signon Screen via Telnet session fails with message CPF1110 - Not authorized to work station. Message CPF2241 - User profile not authorized to *DEVD was found in the IBM i OS QHST log.

Resolving the problem

Logging in to IBM i OS Signon Screen via Telnet session fails with message CPF1110 - Not authorized to work station. Message CPF2241 - User profile not authorized to *DEVD was found in the IBM i OS QHST log.

The system value, QLMTSECOFR was set to a value of 1, Explicit device access needed. Therefore, the user profile attempting to allocate any IBM i OS device cannot do so if the profile has *ALLOBJ or *SERVICE special authority and the user profile does not have explicit authority to that device. Change the system value QLMTSECOFR to a value of 0, Explicit device access not needed, or give the user explicit authority to the specific device. This behavior is not specific to the Telnet Server mechanism used to access the IBM i OS Signon screen.

The system value can be changed using the following command:

CHGSYSVAL SYSVAL(QLMTSECOFR) VALUE('0')

Explicit authority to the device can be given using the following command:

GRTOBJAUT OBJ(devicename) OBJTYPE(*DEVD) USER(userprofile)


Cross reference information
Segment Product Component Platform Version Edition
Operating System IBM i 6.1
Operating System IBM i 7.1
Operating System IBM i 7.3
Operating System IBM i 7.2

Historical Number

21045621

Document information

More support for: IBM i
Communications-TCP

Software version: 4.4.0, 4.5.0, 5.1.0, 5.2.0, 5.3.0, 5.4.0, 6.1, 6.1.0, 7.1, 7.1.0, 7.2, 7.2.0, 7.3, Version Independent

Operating system(s): IBM i

Reference #: N1017629

Modified date: 30 September 2012