Trusted user question
Posted in 1998
I remember a thread a couple of months ago on the flaws in Informix's trusted user scheme, and I need to go back and read them again, but this is not related to that issue. Last weekend, we had to change the IP addresses on one of our LAN segments. Included on that segment was our HP H30 database server, running HP-UX 9.04, Informix 7.10.UC3. After the addresses were changed, anytime a connection was attempted by one of the application PCs, the application received an ODBC error. I then logged on to the HP as informix and attempted to run isql. That attempt failed, and the log looked like: 15:32:02 listener-thread: err = -956: Client host or user (informix@Chopin) is not trusted by the server. To get around this, I added .rhosts files in the home directories for each of the users. I don't like having to do this, and I'll probably catch hell for it when the security administrator finds out that I did. The odd thing is that prior to this address change, no such trickery was required. Why would changing the network addresses cause this? Any ideas on how to avoid using the .rhosts files? I can't revert to the old addresses and even if I could, without knowing why the address change caused this, I don't feel confident that it would fix the problem. Mark Collins mcollins@us.dhl.com The problem lies in how easily and dangerously we forget that manipulating things is not the same as understanding them.