IBM i message

CPF1116: Next not valid sign-on attempt varies off device

CPF1116 is a warning on the IBM i sign-on display. There have been enough failed sign-on attempts on this display that one more will reach the QMAXSIGN limit, and the system will vary off (disable) the display device.

Other names for this code

Also written as MSGCPF1116, CPF1116 varies off device, next not valid sign-on attempt varies off device, AS400 sign-on varies off device, iSeries CPF1116.

What it means

IBM i counts failed sign-on attempts. The system value QMAXSIGN sets the limit, and QMAXSGNACN sets what happens when it's reached. If QMAXSGNACN is 1 (disable the device) or 3 (disable the user and the device, the shipped default), the system varies off the display device once the limit is hit.

CPF1116 is the warning that you're one failure away from that. It appears after the next-to-last failed attempt. The device count is kept per display and only counts failures in a row on that display. One good sign-on resets it.

If the device is varied off, the session goes dead. On an emulator using Telnet the display is a virtual device such as QPADEV0012 or a named device, and a new connection may be given a different device name. The system also sends CPF1397 to QSYSOPR, and to QSYSMSG if that queue exists, naming the device and the user.

Common causes

  • Several wrong passwords or user IDs were typed on this display in a row.
  • Someone else used the same display, or a shared named device, and failed before you.
  • A user without authority to the display kept trying. Failures caused by missing device authority count too.
  • A script or emulator macro is sending stale sign-on details on connect.

How to find the problem

  1. Read the full message with F1. It shows the device name.
  2. An administrator can check QMAXSIGN and QMAXSGNACN with WRKSYSVAL to see the limit and the action.
  3. WRKCFGSTS CFGTYPE(*DEV) CFGD(QPADEV*) or the named device shows whether a display is already varied off.
  4. After the fact, look for CPF1397 and CPF1393 in QSYSOPR, QSYSMSG or the history log with DSPLOG LOG(QHST) MSGID(CPF1397 CPF1393).

How to fix it

  • Stop and make sure of the user ID and password before the next try. Check Caps Lock, and match case if passwords are case-sensitive on your system.
  • If you don't know the password, ask for a reset now rather than risking the last attempt.
  • If the device has already been varied off, an operator can vary it back on with VRYCFG CFGOBJ(device) CFGTYPE(*DEV) STATUS(*ON), or you can reconnect and get a new virtual device if your setup allows it.
  • If a script or saved connection caused the failures, fix its stored password before reconnecting.

IBM documentation

IBM Display Message Descriptions (DSPMSGD). Use the documentation for your installed release.

This link opens the relevant IBM reference library or lookup instructions. Match the complete code and your installed product release; it is not a code-specific review.

Read the installed message description:

DSPMSGD MSGID(CPF1116) MSGF(QSYS/QCPFMSG)

Also inspect the full job log and second-level message text, including substitution values.

Report a correction to WND Software.

Questions

What is the difference between CPF1116 and CPF1392?

CPF1116 warns that the next failure will vary off the display device. CPF1392 warns that it will disable your user profile. The QMAXSGNACN system value sets whether the device, the profile or both are disabled when the limit is reached.

Will waiting reset the counter?

No. The count isn't cleared by time. It is reset by one successful sign-on on that display.

What happens if the console is varied off?

IBM warns that if the console is varied off and nobody can vary it back on, an IPL may be needed to get it back. Be careful with failed sign-ons at the console.