Re: Can I point a DDM file to its own AS/400?

On Wed, 18 July 2001, "Simon Coulter" wrote:

> Yes, you can point a DDM file at the local system.  
> 
> If you are running SNA then you will also need to create an INTRA device or a 
> *LOCAL APPC controller and associated devices.
> 
> If you are running TCP then you will need to start the *DDM server.  You may 
> also need use CHGTCPDDMA and set PWDRQD to *NO.

This is true but requires comment.

Setting PWDRQD(*NO) can be a serious security issue and should not be done 
without significant thought. I recommend setting PWDRQD(*YES) at a minimum and 
PWDRQD(*ENCRYPTED) being best.

Unfortunately, the AS/400 DDM client in the past has not supported sending a 
password, so the setting is a problem. So, to make it work, use server 
authentication entries similar to:

 ===>  addsvraute usrprf(MyUsrPrf) server(QDDMSERVER) +
               usrid(MyUsrID)  +
               password(myusridpwd)

QDDMSERVER must be specified in upper case.

And in order to get server authentication entries to work, you need the 'Retain 
server security data' QRETSVRSEC system value set to '1' for 'Retain data'.

Piece of cake.

Intrasystems Communications Programming manual discusses concepts such as DDM 
back to the same system. Distributed Data Management discusses security as 
above in the topic 'Using DDM over TCP/IP' then 'DDM Security using TCP/IP'.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---