ESQLC/CGI/Security question...

Hello all, I am trying to run an CGI application across the network. I have set the client as a trusted host and so there is no problem connecting to the DB on the server when I login as Informix or any other login on the client machine -the trusted host feature takes care of that. But when I try to run that same application through the web server it gives a -461 error -which is a file open error but in this case it is reffering to permissions. It seems that even though the client is a trusted host, the login that runs httpd (Nobody) cannot utilize the trusted feature. So, I tried to CONNECT USING username and password -as opposed to just CONNECT. It again gives an error but this time it is an invalid password (952) error. So, I tried to see if Informix can connect directly using dbaccess using a username and password -but oddly enough, I cannot connect as Informix on the server machine when I specify the username (Informix) and Informix's unix password at the CONNECTION menu is dbaccess. I am using RedHat 6.0 with IDS 7.3. Could it be because RedHat 6.0 uses the /etc/shadow in addition to the /etc/passwd ? In that case, how do I specify a password and connect to the server? Any suggestions/comments will be greatly appreciated. Thanks, Sandeep Sent via Deja.com http://www.deja.com/ Share what you know. Learn what you don't.

sandeep.singh@usa.net wrote: > I am trying to run an CGI application across the > network. I have set the client as a trusted host > and so there is no problem connecting to the DB > on the server when I login as Informix or any > other login on the client machine -the trusted > host feature takes care of that. But when I try > to run that same application through the web > server it gives a -461 error -which is a file > open error but in this case it is reffering to > permissions. It seems that even though the client > is a trusted host, the login that runs httpd > (Nobody) cannot utilize the trusted feature. > > So, I tried to CONNECT USING username and password > -as opposed to just CONNECT. It again gives an > error but this time it is an invalid password (952) > error. So, I tried to see if Informix can connect > directly using dbaccess using a username and password > -but oddly enough, I cannot connect as Informix on the > server machine when I specify the username (Informix) > and Informix's unix password at the CONNECTION menu is > dbaccess. > > I am using RedHat 6.0 with IDS 7.3. Could it be because > RedHat 6.0 uses the /etc/shadow in addition to the > /etc/passwd ? In that case, how do I specify a password > and connect to the server? Any suggestions/comments > will be greatly appreciated. Thanks, Using RH6.0, ensure that you are neither using MD5 nor shadow passwords. It is a known bug that shadow passwords don't work. It is probably a bug that MD5 passwords don't work (I'm not quite so certain of that, though). -- Jonathan Leffler (jleffler@informix.com, jleffler@earthlink.net) Guardian of DBD::Informix v0.60 -- see http://www.perl.com/CPAN #include <disclaimer.h>