iSeries checks return value *NOTAVL. (NETIQKB54251)

fact
NetIQ Security Solutions for iSeries 8.0

fact
VigilEnt Security Agent for iSeries 7.5

fact
NetIQ Vulnerability Manager 5.x

symptom
iSeries checks return value *NOTAVL.

symptom
When running checks for iSeries agents using Vulnerability Manager, the *NOTAVL value is returned.

fix

Starting with V5R3, OS/400 requires profiles that check auditing System Values (QAUDCTL, QAUDLVL, QAUDLVL2, QAUDENDACN, QAUDFRCLVL and QCRTOBJAUD) to have *ALLOBJ and *SECADM authorities.

By default, the user profile used by our agent communication subsystem, PSOBJOWNS, does have these special authorities but often they get removed by iSeries administrators. Please add *ALLOBJ and *SECADM special authorities to PSOBJOWNS and the Vulnerability Manager checks in question will report the values correctly.

Formerly known as NETIQKB54251