RE: odb security exit program

Walden:

On Tue, 09 October 2001, "Walden H. Leverich" wrote:

> WHAT!! <wipes incredulous look from his face>
>
> IF the vendor is accessing the 400 via ODBC they must be going through the
> exit points, no? Doesn't IBM call the exit points from within their
> server-side code? Now, I'll admit that if you loaded server-side code for
> this vendor then they may use a non-odbc method for accessing data, but IF
> it gets to the 400 via ODBC is must go through the exit, no??

No, not necessarily. For IBM specifically, yes, at the moment; but after IBM, 
it gets iffy.

First, there are multiple servers supplied by IBM; only the ODBC driver vendor 
decides which server will be hit -- and this touches on an obvious point to 
press each vendor on before buying. Second, anyone can write a server; some 
such vendors register their own exit points, I think some pass requests on to 
existing host servers and thereby end up at the original exit points.

Keeping track of which vendor does what is no trivial task.

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/