Display Authorized Users

The Display Authorized Users (DSPAUTUSR) command displays or prints the names of the authorized system users, in alphabetic order. The following information is provided for each user: the group profile of which the user is a member, the most recent password change date, whether the user profile has a password, and the text of the user profile.

Note:    While this command is searching for user profile information to display, another job cannot change user profiles (for example, with the Change User Profile (CHGUSRPRF) command). 


Restriction: The list of system users contains only the names of the user profiles to which the user of this command has at least read (*READ) authority. 

DSPAUTUSR SEQ(*GRPPRF) --> The group profiles are listed alphabetically in the group profile column. Members of that group are displayed alphabetically in the user profile column.

DSPAUTUSR SEQ(*USRPRF) --> This command displays the names of the system users in alphabetic order. For each user the following columns are displayed:
Group profile – the group profile of which the user is a member
Password Last Changed – the last password change date
No password – contains an ‘X’ is the user has no password.  Note that this means that the user cannot sign on
Level 0 or 1 Password - *YES, the user has a password for password levels 0 or 1 as required by the QPWDPVL system value
Level 2 or 3 Password - *YES, the user has a password for password levels 2 or 3 as required by the QPWDPVL system value
Netserver Password – *YES, the user has a Netserver password (enables Windows clients to access shared directory paths and shared output queues)
Local Pwd Mgt – *YES, the user profile password is managed locally (on the AS/400). When the password is not management locally, users cannot access the system by direct sign-on, but through other platforms.

IBM Supplied User Profiles

The following are the few user profiles shipped with the operating system

QSECOFR   - Security Officer
QPGMR      - Programmer
QBRMS      - BRMS profile
QSPL         - Spool profile
QSRV        - Service profile
QSYS        - System profile
QSYSOPR  - System Operator profile
QTCP        - Transmission Control Protocol (TCP) profile
QDFTOWN - For ownership purposes


Printers in AS400

Printer: Hardware device that prints the spool file

Writer: A writer is an IBM program that reads a spool file from an output queue and sends it to a printer

Each printer must have a printer device description. The printer device description contains a configuration description of the printer. Printers can be attached by a variety of attachment methods.

AS/400 supports 2 types of printer objects
1. Print Devices
2. Remote outqs

Print Devices are used to define local printers that are directly attached to or are controlled from AS/400. A print device contains an associated outq for printing spool files

Remote Outqs are spooling writers that send OS/400 spooled file output to a printer that is located on and controlled by remote system (AIX, Linux, Windows box). A remote outq is not associated with any AS400 device. A remote outq is an outq object that contains configuration parameters for sending spooled files to another system for processing. 

Printer files describe how the system operates on the data as it passes between your application program and a printer.

Printing Process Overview
  1. The printing process starts when an application program runs. The application program creates output data. The output data is based on the application program and information contained in the printer file. 
  2. If print spooling is selected, the output data is placed in a spooled file and the spooled file is placed in an output queue. If direct printing is selected, the output data is sent directly to the printer. 

Difference between SST and DST

SST is available when the OS is started. The OS is required for accessing SST. SST is used to manage firmware & hardware. It is not used to manage OS.

DST is available even when the system has limited capabilities. DST is available even if OS is not installed. LIC is required for accessing DST.  

Accessing SST

To access service tools using SST, complete the following steps:
  1. Enter STRSST (Start SST) on an IBM i command line. The Start SST Sign On display is shown.
  2. Enter the following information:
    • Service Tools User ID: The service tools user ID you sign on with.
    • Password: The password associated with this user ID.
  3. Press Enter.
Note: To login to SST, the user ID must have Service (*SERVICE) special authority