× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Le 23/12/2023 à 19:32, Richard Schoen a écrit :
If you have a tunnel open for the IBM ACS SSL ports and SSL is set up, here's a Linux tip. I ran into issues with it recently.

https://github.com/richardschoen/howtostuff/blob/master/ibmi_acs_odbcssl_linux_issue.md

Indeed, it worked for me from a CentOS VM hosted by Windows 11 to pub400.com server.

I just had to install the iACS Linux package, configure a DSN in my .odbc.ini owned file (example here https://www.ibm.com/support/pages/ibm-iaccess-linux-odbc-configuration), and run isql command against the DSN. At a first test, it worked as expected with SSL=0 in the DSN. Then it worked like a charm with SSL=1 in the DSN, and connected using tls. I could confirm it with netstat and in QZDASSINIT joblog. I did not need to install any CA certificates as those of pub400.com certificate were probably already installed.



Otherwise a VPN or SSH connection would be usable I imagine.

Regards,
Richard Schoen
Web: http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx

----------------------------------------------------------------------

message: 1
date: Fri, 22 Dec 2023 14:10:22 -0500
from: a4g atl <a4ginatl2@xxxxxxxxx>
subject: Re: Can anyone help me with getting a secure connection from
a LINUX system to the IBMI?

On Fri, Dec 22, 2023 at 12:53?PM Marc Rauzier <marc.rauzier@xxxxxxxxx>
wrote:

Le 22/12/2023 ? 18:12, a4g atl a ?crit :
We have a remote developer that is using Linux for their hardware.

We tried the IBM ACS ODBC for Linux but he has problems getting the
secure
connection. I have a trusted CA and assigned it to the host servers
and telnet.

Any suggestions would be appreciated.
This is an old document so I cannot say if it is still valid, but I
can read that there is a restriction which prevents configuring an ssl
connection.

Restriction: Sockets Layer (SSL) component
Reason: The SSL component is not needed or shipped with the Linux
driver. Use a common SSL tunnel or Socks server instead.

IBM i Access Client Solutions Linux Application Package - Installation
and usage guide, page 14

ftp://ftp.software.ibm.com/as400/products/clientaccess/solutions/IBMiA
CS_LinuxAppPkg_Install_Usage_Guide.pdf

So, as others write, you may want to set up an ssh tunnel.


As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.