RE: can we on IBMi restrict database updates to user@host like other db platforms

That sounds like a security auditors worst nightmare...

-----Original Message-----
From: Gerald Magnuson <gmagqcy.midrange@xxxxxxxxx>
Sent: Tuesday, June 16, 2020 2:52 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: can we on IBMi restrict database updates to user@host like other db platforms

I wound up putting an exit program on QIBM_QZDA_INIT... I look for the
profile in question, If found, I then get the IP address of the client.
If it is the specific IP of the Admin server, I "swap" profile (QSYGETPH,
QWTSETP) to the profile that allows update...

On Tue, Jun 16, 2020 at 8:27 AM Rob Berendt <rob@xxxxxxxxx> wrote:

You could put a trigger on the table which says that all updates from
user profile developer which originate from other than a specific IP
address are rejected.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Gerald Magnuson
Sent: Monday, June 15, 2020 9:46 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: can we on IBMi restrict database updates to user@host like
other db platforms

CAUTION: This email originated from outside of the organization. Do
not click links or open attachments unless you recognize the sender
and know the content is safe.


Can I somehow restrict a profile to only allow connection from a
specific ip?
--

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com