RE: QUSER on ODBC requests

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: rob@dekko.com
>
> And how, pray tell, would you have a batch program, like RUNRMTCMD, access
> your 400?  Force it to only run interactive and prompt the userid and
> password?

There are certainly many options, but one thing I probably would NOT do is
allow RUNRMTCMD.  Instead, I'd probably have a program that listened on a
specific port for a request.  The program would only allow requests from
certain trusted addresses.  This would all be on an internal non-addressable
network (all with 10. addresses).

It would be a little more programming to add a new request, but that far
outweighs the security risks inherent with allowing unfettered access to
programs from a client.  Of course, you can attribute this whole discussion
to my view of distributed programming; I believe that centralized control of
servers by the host is preferable to unbounded access by clients.

Joe