RE: FTP commands over a VPN to an AS/400 - (spelling corrections)

["Mark A. Manske" <mmanske@xxxxxxxxxxxxxxxxxx>]

I would also write your own ftp validation program, and use the wrkreginf
command to
add it to the system exit points.
We do that here and you can get VERY specific on what a user can do via FTP,
some people can only send me a file, not even do a dir or ls.

If you do not want to go that route, there are some nice packages out there
that will help you lock down all the "unique" ways you can get into an
AS/400
other than green-screen.

If you would like a code example let me know, I could send you a text file
off-line as an attachment.

HTH
Mark


-----Original Message-----
From: midrange-l-admin@midrange.com
[mailto:midrange-l-admin@midrange.com]On Behalf Of Charlie Browne
Sent: Thursday, May 23, 2002 9:34 AM
To: 'midrange-l@midrange.com'
Subject: RE: FTP commands over a VPN to an AS/400 - (spelling
corrections)


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
--
[ Picked text/plain from multipart/alternative ]
You can give them a USRPRF that has limited authority. Normal AS400 object
level security is in effect when you FTP.

Charlie Browne
Creative Software Services
Cedar Rapids IA



-----Original Message-----
From: Frank W. Kany IV [mailto:frank.kany@burr-reid.org]
Sent: Wednesday, May 22, 2002 7:33 AM
To: midrange-l@midrange.com
Subject: FTP commands over a VPN to an AS/400 - (spelling corrections)


This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
A client of ours insists on encrypting a file and sending it via FTP instead
of emailing it.  We have never let a customer FTP into our AS/400 before.

For test purposes, I played around with running FTP commands from my home
via a VPN to the AS/400 at work to test out how our client would get into
our system.  I was surprised to find out that when I added or deleted a file
from the system, there was no record or log of my activities when I was
signed on via FTP.

Our company has to setup the VPN software on the client's PC to enable them
to FTP to our AS/400.

Is there a way to keep track or log any kind of FTP commands or anything
done to the system while a customer is signed on via FTP?  Or, is there a
way to limit what a user can do while signed on via FTP?

TIA,

Frank
--


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.