Trusted Hosts facility implementation frustration

After attempting to read the Trusted Hosts manual and going in several loops with all of the circular references in the documentastion, I am ready to retire. Does anyone have any "readable" documentation with EXAMPLES on how to implement the Trusted Hosts Facility? Especially what the config files look like. Thanks Doug McAllister Fidelity Investments

Doug McAllister@Fidelity Investments wrote: > After attempting to read the Trusted Hosts manual and going in several > loops with all of the circular references in the documentastion, I am > ready to retire. > Does anyone have any "readable" documentation with EXAMPLES on how to > implement the Trusted Hosts Facility? Especially what the config files > look like. 'Trusted Hosts' isn't recognizable - but I guess you are looking for information about auditing and find the 'Trusted Facility' manual too inscrutable? What are you seeking to audit? Do you need formal role separation - the DBSSO can't see what the AAO can see and vice versa - or is group informix going to handle both roles? Which platform? Which version of IDS? It doesn't make a lot of difference, but it is always a help to know. (For example, enabling role separation on Windows is a re-install; it is not on Unix.) Potted guide - working mostly from memory, assuming no role separation: onaudit -l 7 -p /usr/informix/tmp -s 102400 -e 3 onaudit -a -u _exclude -e +INRW,UPRW,DLRW,RDRW onaudit -a -u _require -e +CRTB,DRTB,ACTB,STSN The first command turns on auditing, placing the logs in /usr/informix/tmp, setting the file size to 100KB, stopping the server if there is an error, and auditing user informix as well as everyone else. The second ensures that the row-level operations are never audited. The third demands that create table, drop table, access table and start session are audited for everyone. -- Jonathan Leffler #include <disclaimer.h> Email: jleffler@earthlink.net, jleffler@us.ibm.com Guardian of DBD::Informix v2005.02 -- http://dbi.perl.org/