Re: How to audit users of strsql?

It sounds like IBM should be working on getting us a way to audit users of sql better in the OS. Then again, if NetIQ/Powertech will probably do a better job.




-----Original Message-----
From: rob <rob@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Wed, Jun 20, 2012 10:19 am
Subject: Re: How to audit users of strsql?


... or iNav's Run SQL Scripts, or...
eah, I agree with Luis on this.

ob Berendt
-
BM Certified System Administrator - IBM i 6.1
roup Dekko
ept 1600
ail to: 2505 Dekko Drive
Garrett, IN 46738
hip to: Dock 108
6928N 400E
Kendallville, IN 46755
ttp://www.dekko.com


From: Luis Rodriguez <luisro58@xxxxxxxxx>
o: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
ate: 06/20/2012 09:56 AM
ubject: Re: How to audit users of strsql?
ent by: midrange-l-bounces@xxxxxxxxxxxx

Frank,
IIRC, working with SQL sessions is a real PITA. Also, a user could bypass
t easily using RUNSQLSTM, SQLRPGLE, etc.
What happens if you try to work with SQL's exit points?

est Regards,
Luis Rodriguez
BM Certified Systems Expert — eServer i5 iSeries
-


n Wed, Jun 20, 2012 at 9:14 AM, <fbocch2595@xxxxxxx> wrote:

Hi Y'all, for you folks that allow programmers to use strsql, how do you
audit them? My interest is in knowing the statements they run and what
data is changed via their strsql sessions. Is it possible to force
ession
info to be generated upon their every use of strsql? I'd like to force
n
sql session upon every strsql usage and then make sure that session can
ot
be deleted. I think there's 3rd party software that will help but we'll
o
the native OS route for now.

Any suggestions/recommendations?

Thanks, Frank
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
ist
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
ist
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.