Exit programs RE: Understanding D specs

[qsrvbas@xxxxxxxxxxxx (Tom Liotta)]

rpg400-l-request@xxxxxxxxxxxx wrote:

>   4. RE: Understanding D specs  (Pete Helgren)
>
>Thanks also for the pointers on securing the objects (I knew that) and with
>the setting of the "peAllowSignOn" parameter to "1" caveat (YIKES! Who
>woulda thunk you could do that? Successfully sign on with a bad password?)

This is a difficult item for me to comment on, but there're enough serious 
aspects that something needs saying.

Exit points created for IBM servers have serious security implications. Any 
exit point interface that includes a 'Accept/Reject' flag passed back from the 
exit program is a potential hole in your system. (There are others.) Security 
granularity is one of the reasons the exit points exist in the first place.

Exit program vendors deal with these issues and try to keep up with each little 
nuance created by IBM as they go from release to release (and even PTF to PTF). 
A lot of iSeries customers don't have the time to stay fully aware of these; 
believe me, _we_ have trouble keeping up.

<PREACH *ON>
If you're writing your own exit programs, be VERY aware of what you mean when 
your exit program sends the flag back to the server to 'Accept' the 
transaction. Many servers are perfectly happy to do just what you tell them to 
do.
</PREACH>

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com


__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need.

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp