Re: IBM i for Wintel Hackers - Silent Signal TROOPERS24 Presentation

They changed ftp long ago...
ftp> quote rcmd dspjob output(*Print)
550-Error occurred on command dspjob output(*Print).
550 Error found on DSPJOB command..
If I change that user back to LMTCPB(*NO) I get
ftp> quote rcmd dspjob output(*print)
250 Command dspjob output(*print) successful.

On Mon, Sep 9, 2024 at 10:34 AM Raul Alberto Jager Weiler <
raul.jager@xxxxxxxxx> wrote:

FTP gives access to run IBM i commands. You can limit the use in WRKFCNUSG

https://g.co/gemini/share/647d7d4077e3

On Mon, Sep 9, 2024 at 7:28 AM Patrik Schindler <poc@xxxxxxxxxx> wrote:

Hello Gavin,

Am 08.09.2024 um 05:33 schrieb Gavin Inman <midrangelist@xxxxxxxxxxxxxx
:

Don't give users Limited capability *NO or Access to any command line,

including QSh.

That's only half of the equation. There are plenty more ways to connect
without the need for a command line.

Also, it's not always practical to remove command line access to each and
every (ordinary) user.

Security is not a simple switch, it's a mindset which has to be there

from

the first implementation steps.

:wq! PoC

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.