Are there any ODBC or QZDASOINIT entries of any kind posted to the *INTSYSJRN journal without any action on my part?
I know auditing should be planned ahead of time, but until object auditing gets turned on for a particular file, is there any accounting for activity against it?
No, there are no QZDASOINIT entries without action on your part. I'm not exactly sure what you mean by "accounting activity". There's the object usage information that can be displayed using Display Object Description (DSPOBJD) but if you're looking for the profile that accessed an object or the program running, you would need to first turn on auditing. If you have the file journaled, information is available in the journal. But again, you must first set up journaling.
MORE INFORMATION ON THIS TOPIC
The Best Web Links: tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Check out this Search400.com Featured Topic: Top ten security tips
Dig Deeper on iSeries system and application security
Related Q&A from Carol Woodbury
Before changing password levels and upgrading operating systems on the AS/400, ensure the clients connecting to the NetServer do not need the old ... Continue Reading
Look in the audit journal (QAUDJRN) on the AS/400 for an authority failure message with the name of the library as the object name. Use the ... Continue Reading
When error messages arise concerning attempts to use a permanent system object without authority, find the source of the issue by looking for an AF ... Continue Reading