RE: FTP

[George Lemen <georgelemen@xxxxxxxxxx>]

Dirk --
 To use FTP the user is still required to sign on with a valid AS/400 and 
password. Normal AS/400 user profile object security rules still apply.
 BTW -- there are third party software packages that ease the work of using the 
IBM exit points to monitor data access and tightening security. These are aimed 
at users who access the AS/400 from other than green-screen (or complement 
normal security if your green-screen application defaults to TOO much 
authority). I can supply at least one vendor name off-line (I'm not connected 
to the firm I have in mind.)

 Best regards  
George Lemen
CIBER Inc. e-mail: glemen@ciber.com; phone: (425) 451-2575 extension 142
personal: georgelemen@seanet.com

----------
From:   dirk.de.neve@newwave.be[SMTP:dirk.de.neve@newwave.be]
Reply To:       MI400@midrange.com
Sent:   Monday, January 15, 2001 10:55 PM
To:     MI400@midrange.com
Subject:        Re:FTP



One of our customers want to use FTP to put and get files from our AS400.
I made him a userprofile and an initial library.
What about security, when I test the user via FTP, I see that the FTP user is
always
startup in the Qsys.lib . And the ftpuser can go to any library he wants ans
even delete files there.
I know about exit point programs, but is there an another possibility to protect
are Data using FTP.
Our system is OS400 V4R3.
Are there more possibility's in V4R4 ?

Dirk

_________________________________________________
Dirk De Neve
Analyst Programmeur
New Wave Logistics (Belgium) NV
Keetberglaan 2 9120 Melsele
Tel: +32 3 570.69.88
GSM: +32 478 41.15.29
mailto:dirk.de.neve@newwave.be



+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---

application/ms-tnef