External vScan fails on MAV enabled ONTAP clusters
Applies to
- ONTAP 9.11.x +
- Multi Admin Verification (MAV)
Issue
- External vScan fails to scan particular vServers on an MAV enabled ONTAP cluster
- Message:
[set -privilege diagnostic -confirmations off]
The cluster user 'admin' requests your approval of the following operation on
cluster '<cluster_name>':
set -privilege diagnostic -confirmations off
You have until <date_and_time> to approve or veto the
request.
In order to approve or veto this request, please visit the link below
- audit.log:
0000001d.003afb0f 04ae3a53 Thu Apr 06 2023 09:01:15 +02:00 [kern_audit:info:2636] 8503e8000061c6f3 :: <Cluster_Name>:http :: <External_vScanner_IP>:60882 :: <Cluster_Name>:admin :: POST /api/private/cli : {"input":"set diag -confirmations off; vserver vscan default-fileop-profile show -vserver <SVM_Name>"} :: Pending
0000001d.003afb12 04ae3a53 Thu Apr 06 2023 09:01:15 +02:00 [kern_audit:info:2636] 8003e9000012d26d:8003e9000012d26e :: <Cluster_Name>:console :: <External_vScanner_IP>:unknown :: <Cluster_Name>:admin :: set diag -confirmations off :: Pending
0000001d.003afb14 04ae3a53 Thu Apr 06 2023 09:01:15 +02:00 [kern_audit:info:2636] 8003e9000012d26f:8003e9000012d270 :: <Cluster_Name>:console :: <External_vScanner_IP>:unknown :: <Cluster_Name>:admin :: set diag -confirmations off :: Error: The security multi-admin-verify request (index 811) requires approval.
0000001d.003afb15 04ae3a53 Thu Apr 06 2023 09:01:15 +02:00 [kern_audit:info:2636] 8003e9000012d26f:8003e9000012d272 :: <Cluster_Name>:console :: <External_vScanner_IP>:unknown :: <Cluster_Name>:admin :: Logging out :: Success
0000001d.003afb16 04ae3a53 Thu Apr 06 2023 09:01:15 +02:00 [kern_audit:info:2636] 8503e8000061c6f5 :: <Cluster_Name>:http :: <External_vScanner_IP>:60906 :: <Cluster_Name>:admin :: POST /api/private/cli : {"input":"set diag -confirmations off; vserver vscan default-fileop-profile show -vserver <Cluster_Name>_nfs"} :: Error: unable to parse command