brainchime.com Latest Questions

Admin
Asked: 2024-10-06T17:45:21+05:30 In:

How to restrict users to limited number of sessions?

I am new to the administration of the IBM i system and learning things step by step and now I have been asked by my team to research how can I restrict IBM i users open a limited number of sessions at a time let say allow them to open only 2 sessions for each user. How can I implement this on IBM i as an IBM i administrator person? 

as400as400-administration

Related Questions

Leave an answer

Leave an answer

Browse
Browse

Choose from here the video type.

Put Video ID here: https://www.youtube.com/watch?v=sdUUx5FdySs Ex: "sdUUx5FdySs".

1 Answer

  1. Admin

    We can set the maximum number of sessions a user can open at a time by the limit device sessions (QLMTDEVSSN) system value.

    The default value is 0 which means do not limit the sessions
    If you set 1-9, the user is limited to the specified number of device sessions.

    From the IBM i green screen command line, you can type the following IBM i command and press Enter.
    WRKSYSVAL SYSVAL(QLMTDEVSSN)
    Take option 2 to change.

    Note: QLMTDEVSSN is a global setting and if you want to limit a specific user to open a specified number of sessions only then set the LMTDEVSSN value for a specific user profile. For Example, Type the below command on the IBM i green screen and press Enter.
    WRKUSRPRF USRPRF(user-profile)
    Take option 2 to change.

    You can set the following values for the LMTDEVSSN parameter of the WRKUSRPRF command :

    *SYSVAL: The QLMTDEVSSN system value is used.
    *NO: The user may be signed on to more than one device session at the same time.
    *YES: The user may not be signed on to more than one device session at the same time.
    0: The user is not limited to a specific number of device sessions. Same as *NO.
    1: The user is limited to a single device session. Same as *YES.
    2-9: The user is limited to the specified number of device sessions.

    Please also note that You must be  security officer or a security administrator to add, change, copy, or remove users. Otherwise, you are not authorized to make a change request. Once, the limit is set for the specific user then the following message will be shown to the user if the user has reached the maximum number of sessions: CPF1220 User XYZ has reached the device session limit.