Rob,
You probably have NETGUEST enabled, may want to consider disabling.
We had it enabled years back on our R&D LPAR.
It allowed a user to connect as a guest without having to type their user/password.
We had to disable NETGUEST, Security issue.
For those three users, does their iSeries account match their Windows account?
Might be a factor.
NetServer Best Practices
https://www-01.ibm.com/support/docview.wss?uid=nas8N1011371
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Wednesday, October 31, 2018 9:33 AM
To: midrange-l@xxxxxxxxxxxx
Subject: NetServer Guest profile
I ran this query:
Select
MESSAGE_TEXT, -- The first level text of the message including
tokens.
count(*) as NbrOfOccurences
from table(qsys2.joblog_info('136558/QUSER/QZLSFILET')) A
where message_id='CPIAD12' and message_text like '%NETGUEST%'
group by message_text
order by message_text
;
I have a few thousand hits. A bulk is from one IP address. The rest are
from three users, all of whom use their IBM i id's daily via 5250 and
currently have active 5250 jobs. Why would these last be using NETGUEST?
Basically: Why would NetServer use the guest account when someone has a
valid user id?
No users are currently disabled for NetServer access. I checked at
http://myserver:2001, Network, Servers, TCP/IP Servers, IBM i NetServer,
Disabled user ids.
Rob Berendt
midrange.com
