Re: Is it possible to lock down ODBC connections?

So, the preventing of use of ODBC can't really be done by restricting it via Ops Nav???An exit point must be written???
?







-----Original Message-----
From: John Earl <john.earl@xxxxxxxxxxxxx>
To: Security Administration on the AS400 / iSeries <security400@xxxxxxxxxxxx>
Sent: Thu, 10 Jul 2008 5:21 pm
Subject: Re: [Security400] Is it possible to lock down ODBC connections?



Mile,

That is correct - you only need to write an exit program for one of
those exit points. And the QIBM_QZDA_SQL2 exit point is vastly
preferable because it passes SQL strings up to 32K (may be larger now)
rather than just the 512 bytes passed by the QIBM_QZDA_SQL1 exit point.
Obviously if you used the QIBM_QZDA_SQL1 exit point you could miss a lot
of important object references that happened to be embedded at bytes
513+.

jte

--

John Earl, VP and Chief Technology Officer
PowerTech: 253-872-7788
Direct: 253-479-1408
Mobile: 206-669-3336
John.Earl@xxxxxxxxxxxxx




Email is an excellent way to communicate material that is not time
sensitive. If your communication is of a more urgent nature, please
call.

===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.

-----Original Message-----
From: security400-bounces@xxxxxxxxxxxx
[mailto:security400-bounces@xxxxxxxxxxxx] On Behalf Of Mike
Sent: Thursday, July 10, 2008 12:52 PM
To: Security Administration on the AS400 / iSeries
Subject: Re: [Security400] Is it possible to lock down ODBC
connections?

So looking at the conversation here and some of the things I
have read; I would have to parse the SQL in order to do
object-level security in the
QIBM_QZDA_SQL1 or QIBM_QZDA_SQL2 exit points?

--
Mike Wills
Midrange Programmer/Analyst

Sick of corporate radio and hungry for something new?
http://thenextgenerationofradio.com
Stalking me? http://twitter.com/MikeWills |
http://friendfeed.com/mikewills
_______________________________________________
This is t

he Security Administration on the AS400 / iSeries

(Security400) mailing list To post a message email:
Security400@xxxxxxxxxxxx To subscribe, unsubscribe, or change
list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx Before posting,
please take a moment to review the archives at
http://archive.midrange.com/security400.

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing
list
To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.