Re: AS/400 Security with ODBC

I always recommend belt and braces;

Object authority, in whatever form you define it, is essential to normal
AS/400 access to objects.

Exit points have been specifically provided by IBM so that you can add an
extra layer of checks where the normal authority rules no longer apply.
You want to give people tools which make use of ODBC etc but that could
cause an exposure.  Also be aware that some ODBC products in the past have
bypassed the exit points anyway!

Another area I would advise you to consider is whether, for your business
and applications, normal profile / password processing is tight enough for
"external" access or whether you need stronger authentication.


If you would like to investigate one of the options for exit point control
please consider our software DetectIT - www.detect-it.com

Regards

Martin A Norman
Sales Systems Engineer
SoftScreen Inc.
martinn@softscreeninc.com
1-800-558-3544
========================================

From:
To: MS Outlook::MIDRANGE-L@midrange.com

Subject: AS/400 Security with ODBC
Date: 6/23/00 4:57 AM

We would like to find out what is the best way to control security to the
AS/400 data from ODBC, FTP, Internet, Client Access & who knows what else.
Is it best to use “Application Only Access”, Exit Programs, a
combination of both or is there something new available?

Any help would be greatly appreciated.

Thank you

Lenny Bellott
Shop-Vac Corporation
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---