RE: Public authority (was Re: upload file error)

By the way... based on connecting to her machine via teamviewer and watching how she logs in, and from the main screen AS G092KMB she is uploading the particular file.. there is nothing that leads me to believe the system is picking up any other "user" trying to access that library list file.

Weird at best

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Charles Wilt
Sent: Tuesday, September 30, 2014 10:28 AM
To: Midrange Systems Technical Discussion
Subject: Public authority (was Re: upload file error)

On Tue, Sep 30, 2014 at 10:04 AM, Buck Calabro <kc2hiz@xxxxxxxxx> wrote:

I don't want to sound like a jerk but I come by it naturally :-)
*PUBLIC is everybody in the universe, not just the 3 users in that
portion of the company. If I had your machine's IP address, I could
almost certainly read and modify the contents of that file from here.
--buck

​Not quite...let's not panic the guy Buck!...

*PUBLIC is every user profile on the machine that doesn't have explicit
private authorities. So anybody with credentials on the machine can modify
that file now.

So it'd take Buck more than just knowing the IP of the machine, even
assuming it's not behind a firewall. He'd have to know or be able to guess
a valid user profile/ password combination.

​Hopefully ​you don't have any default passwords, where the password = user
ID. You can check by doing, GO SECTOOLS and selecting option 1 = Analyze
default passwords.

Then there are anonymous services, such as FTP or the Netserver "Guest"
account. Anonymous FTP isn't allowed by default, you have to have create
or buy an FTP exit point program to enabled it.
http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_71/rzaiq/rzaiqftpanon.htm

You can check for exit programs via
WRKREGINF EXITPNT(QIBM_QTMF_SVR_LOGON)

Look at the line
Current number of exit programs . . . : 0

The "Guest" netserver account is basically a generic account used by the
IBM SMB (windows) file server. It's used when a windows users tries to
access a IBM i Netserver file share and there isn't a matching IBM i user
ID. Again, it is not enabled by default. You'd need to use the IBM
i Navigator GUI to see if it is enabled.
http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_71/rzahl/rzahlguestprofs.htm

Charles