Hi all,

I have a server that was recently updated to 5.4 from an old TSM server.  One 
of the admin accounts, called OPERATOR, had a password expire over the weekend 
so this morning the administrator updated the password.  Now we are getting the 
following messages:

1/22/08 2:00:00 PM CST ANR0407I Session 17320 started for administrator 
OPERATOR (AIX) (Tcp/Ip aixdb(64763)). (SESSION: 17320) 
1/22/08 2:00:00 PM CST ANR2177I OPERATOR has 1 invalid sign-on attempts. The 
limit is 3. (SESSION: 17320) 
1/22/08 2:00:00 PM CST ANR0418W Session 17320 for administrator OPERATOR (AIX) 
is refused because an incorrect password was submitted. (SESSION: 17320) 

How do we find out what jobs are trying to run with this account so we can 
reset it?  This would have been setup a long time ago by an administrator that 
is no longer here.  Any help would be appreciated, thanks.

Debbie Haberstroh
Server Administration
Northrop Grumman Information Technology 
Commercial, State & Local (CSL)