RE: Informix Warehouse Accelerator Prerequisites
And it would be easier to switch to SSH and avoid any issues period. Note: I never worried about 'sniffing' that was your own Fernando. My comments and recommendations still stand. HTH -G > To: red_valsen@yahoo.com > Subject: Re: Informix Warehouse Accelerator Prerequisites > From: MARTINFU@de.ibm.com > Date: Mon, 22 Aug 2011 14:11:50 +0200 > CC: informix-list-bounces@iiug.org; informix-list@iiug.org > > Hi, > > there have already been several posts that contain correct > answers, but to be clear ... here a condensed repeat: > > - IWA uses the telnet protocol for some rather internal > communication for few administrative commands. > For that purpose IWA must be explicitly configured to > listen at a specific port on a specific IP-address. > Recommended for that IP-address is the localhost (127.0.0.1). > With that nobody from the outside can connect to IWA > in this way. > > - No telnet service is required on the machine where IWA > is running. That means no telnet daemon (telnetd) should > be running. (This normally is the big concern regarding > security.) > > - As an easy way to issue those few administrative commands, > a telnet client program (e.g. telnet) can be used, as does the > ondwa script. With IWA configured for localhost only, this > can be done only locally on the machine. That is why there > is the requirement to have the telnet client program available > on the machine. > > - There is no password required when issuing such > commands via the telnet protocol. Therefore, there > is no possibility to "sniff" any password of any user, > not even when being logged in locally as user root. > (The telnet protocol is only used as a means for > communication, but not for user authentication > in any way.) > > Admittedly we may be able to enhance the documentation > somewhat, to avoid for potential users the effect of raised > bristles and ringing alarm bells when merely reading the > word "telnet". > > TIA, Martin > -- > Martin Fuerderer > IBM Informix Development Munich, Germany > Information Management > > Read about the Informix Warehouse Accelerator: > http://tinyurl.com/the-iwa-blog > > IBM Deutschland Research & Development GmbH > Chairman of the Supervisory Board: Martin Jetter > Board of Management: Dirk Wittkopp > Corporate Seat: Boeblingen, Germany > Reg.-Gericht: Amtsgericht Stuttgart, HRB 243294 > > informix-list-bounces@iiug.org wrote on 08/19/2011 08:46:07 PM: > > IBM lists on its website (http://publib.boulder.ibm.com/infocenter/ > > idshelp/v117/index.jsp?topic=%2Fcom.ibm.acc.doc%2Fids_acc_prereqs.htm) > > the presence of the woefully insecure Unix utility telnet as a > > prerequisite for use of the Informix Warehouse Accelerator. It's been > > nearly 10 years since I've worked in an IT environment that would > > allow telnet since it transmits passwords in clear text. The > > screaming security hole that telnet use implies becomes a showstopper > > to even broaching IWA to management -- even for test and evaluation. > > What in the world is the need for using telnet with IWA? Can a more > > palatable utility be substituted? > > _______________________________________________ > > Informix-list mailing list > > Informix-list@iiug.org > > http://www.iiug.org/mailman/listinfo/informix-list > > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list