Re: Starting FTP

[Jim Langston <jlangston@xxxxxxxxxxxxxxxx>]

Just be sure if you use adopted authority (owner authority) that the
user can not get to a command line.  Very big security hole.  Set
up a CL with adopted authority that you compile, the user runs it
and gets to a command line somewhere and all of a sudden this
user has your authority.

Just because of this security possibility we never use adopted
authority on our system.

Another possibility you might think about: have a program running
all the time that checks for some message and all it would do would
start the FTP server.  You could submit this yourself, and since it
was running in the batch subsystem people wouldn't have access to
it.  Perhaps have it look at message queue QTCP for a certain message.
Or have it examine a data queue periodically.  Or any other of a
few ways to trigger an active program to do something.

Just some thoughts.

Regards,

Jim Langston

Chris Bipes wrote:

> The easies way to create a CL wrapper program that runs under owner
> authority.  You can then give individual users authority to the CL program.
> Either that or give way to much authority to the user.
>
> Christopher K. Bipes     mailto:ChrisB@Cross-Check.com
> Sr. Programmer/Analyst   mailto:Chris_Bipes@Yahoo.com
> CrossCheck, Inc.         http://www.cross-check.com
> 6119 State Farm Drive    Phone: 707 586-0551 x 1102
> Rohnert Park CA  94928 Fax: 707 586-1884
>
> *Note to Recruiters
> Neither I, nor anyone that I know of, is interested in any new and/or
> exciting positions. Please do not contact me.
>
> -----Original Message-----
> From: Angela Wawrzaszek(EXCH) [mailto:wawrzaszeka@AUSTEEL.com]
> Sent: Monday, November 29, 1999 12:31 PM
> To: Midrange mail list (E-mail)
> Subject: Starting FTP
>
> I am trying to use a RMTCMD to start FTP within a .bat file,   It works
> fine with my profile signed on to the AS/400, however when the user
> tries it, FTP won't start.   So I am assuming it has to do with
> security.  What do I have to do to allow a user to use the command
> STRTCPSVR *FTP.   We would like to do this so that we do not leave FTP
> running all the time, it is only activated when we need it.
>
> Thanks,
> Angela Wawrzaszek
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---