VigilEnt Security Agent for AS/400 5.3/6.3
String of authority failures attributed to QUSER are found on the Authorization Failures for Specified Dates Report AACL28AF.
EXAMPLE: 01/08/21 8:34:01 QPWFSERVSO QUSER 166494 QPWFSERVSO localuser A 12345(library) 1234(object) *FILE
- The QPWFSERVSO job (which is the File Server prestart job) runs under the user QUSER.
- In the user profile column (localuser), that is the user that was signed on through the File Server and was trying to access the objects listed in the Object Name (1234) field.
- The "A" indicates the user attempted to access an object to which they were not authorized.