UNIX/Windows network security

I have two different Informix instances running in two separate machines in the same network: One in UNIX and another in Windows: 1st machine: -------------- OS: SCO UNIX hostname: thasos Informix DS 9.21, server name: ol_aegean user: akin Database dbakin $ cat /etc/hosts.equivbarou $ cat $INFORMIXDIR/etc/sqlhosts ... ol_akin3 ontlitcp 192.168.96.173 turbo ( this is an alias of ol_akin...) 2nd machine: --------------- OS: Windows XP Pro hostname: barou Informix DS 10.0, server name: ol_akin (DBSERVERALIAS = ol_akin3) user: informix Database dbakin The ICSDK is installed and configured so the windows user "informix" can run dbaccess and connect to ol_aegean (in SCO UNIX). While it remains connected to the (local) database "dbakin", he can also: select * from dbakin@ol_aegean:anytable - this is ok, as the user is trusted in unix I try the reverse thing: The unix-user "akin" currently can run dbaccess and CONNECT TO ol_akin3 giving username and passwords (informix / xyz), BUT I want to be able to select from windows tables without having to disconnect from UNIX DB first and then connect to "ol_akin3" / specifying user/password I created \\\\%WINDIR%\\\\system32\\\\drivers\\\\etc\\\\hosts.equiv writing thasos (and) thasos.mydomain.xx but trying: select * from dbakin@ol_akin3:atable always get the error 951: Incorrect password or user akin@192.168.96.12 is not known on the d 951: Incorrect password or user is not known on the database server. <<<theunix user is unknown to windows IDS, right? I tried also to use .netrc in the unix user ( machine barou login informix password xyz ) with no luck What is missing? Regards Pas

The answer is in online.log: Add: 192.168.96.12 to your hosts.equiv and you user will have access. gerd > -----Ursprüngliche Nachricht----- > Von: ids@iiug.org > Gesendet: 19.05.06 15:58:05 > An: ids@iiug.org > Betreff: UNIX/Windows network security [6764] > > I have two different Informix instances running in two separate machines in > the same network: One in UNIX and another in Windows: > > 1st machine: > -------------- > OS: SCO UNIX > hostname: thasos > Informix DS 9.21, server name: ol_aegean > user: akin > Database dbakin > > $ cat /etc/hosts.equiv> barou > $ cat $INFORMIXDIR/etc/sqlhosts > .... > ol_akin3 ontlitcp 192.168.96.173 turbo ( this is an alias of ol_akin...)> > 2nd machine: > --------------- > OS: Windows XP Pro > hostname: barou > Informix DS 10.0, server name: ol_akin (DBSERVERALIAS = ol_akin3) > user: informix > Database dbakin > > The ICSDK is installed and configured so the windows user "informix" can run > dbaccess and connect to ol_aegean (in SCO UNIX). > While it remains connected to the (local) database "dbakin", he can also: > select * from dbakin@ol_aegean:anytable - this is ok, as the user is trusted > in unix> > I try the reverse thing: > The unix-user "akin" currently can run dbaccess and CONNECT TO ol_akin3 giving > username and passwords (informix / xyz), BUT > I want to be able to select from windows tables without having to disconnect > from UNIX DB first and then connect to "ol_akin3" / specifying user/password > > I created \\\\%WINDIR%\\\\system32\\\\drivers\\\\etc\\\\hosts.equiv writing > thasos (and) > thasos.mydomain.xx > > but trying: > select * from dbakin@ol_akin3:atable> > always get the error > > 951: Incorrect password or user akin@192.168.96.12 is not known on the d> > 951: Incorrect password or user is not known on the database server. <<<the> unix user is unknown to windows IDS, right? > > I tried also to use .netrc in the unix user > ( machine barou login informix password xyz ) > with no luck > > What is missing? > > Regards > Pas > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > _______________________________________________________________ SMS schreiben mit WEB.DE FreeMail - einfach, schnell und kostenguenstig. Jetzt gleich testen! http://f.web.de/?mc=021192

Thank you gerd I created a windows user named "akin" (as in Unix) with the same password, and worked. -----Original Message----- From: gerd kaluzinski [mailto:gerd.kaluzinski@web.de] Sent: ?a?as?e??, 19 ?a??? 2006 6:01 µµ To: ids@iiug.org Subject: Re: UNIX/Windows network security [6765] The answer is in online.log: Add: 192.168.96.12 to your hosts.equiv and you user will have access. gerd > -----Ursprungliche Nachricht----- > Von: ids@iiug.org > Gesendet: 19.05.06 15:58:05 > An: ids@iiug.org > Betreff: UNIX/Windows network security [6764] > > I have two different Informix instances running in two separate machines in > the same network: One in UNIX and another in Windows: > > 1st machine: > -------------- > OS: SCO UNIX > hostname: thasos > Informix DS 9.21, server name: ol_aegean > user: akin > Database dbakin > > $ cat /etc/hosts.equiv> barou > $ cat $INFORMIXDIR/etc/sqlhosts > .... > ol_akin3 ontlitcp 192.168.96.173 turbo ( this is an alias of ol_akin...)> > 2nd machine: > --------------- > OS: Windows XP Pro > hostname: barou > Informix DS 10.0, server name: ol_akin (DBSERVERALIAS = ol_akin3) > user: informix > Database dbakin > > The ICSDK is installed and configured so the windows user "informix" can run > dbaccess and connect to ol_aegean (in SCO UNIX). > While it remains connected to the (local) database "dbakin", he can also: > select * from dbakin@ol_aegean:anytable - this is ok, as the user is trusted > in unix> > I try the reverse thing: > The unix-user "akin" currently can run dbaccess and CONNECT TO ol_akin3 giving > username and passwords (informix / xyz), BUT > I want to be able to select from windows tables without having to disconnect > from UNIX DB first and then connect to "ol_akin3" / specifying user/password > > I created \\\\%WINDIR%\\\\system32\\\\drivers\\\\etc\\\\hosts.equiv writing > thasos (and) > thasos.mydomain.xx > > but trying: > select * from dbakin@ol_akin3:atable> > always get the error > > 951: Incorrect password or user akin@192.168.96.12 is not known on the d> > 951: Incorrect password or user is not known on the database server. <<>unix user is unknown to windows IDS, right? > > I tried also to use .netrc in the unix user > ( machine barou login informix password xyz ) > with no luck > > What is missing? > > Regards > Pas > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > _______________________________________________________________ SMS schreiben mit WEB.DE FreeMail - einfach, schnell und kostenguenstig. Jetzt gleich testen! http://f.web.de/?mc=021192 ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.392 / Virus Database: 268.6.1/344 - Release Date: 19/5/2006