Re: I-NET/STAR & SECURITY

Mark Kellaway wrote: > > I briefly noticed a discussion here a while ago regarding the security > implications of setting up I-NET/STAR connections (UNIX-UNIX) whereby you > have to set up an account on the remote machine with a .rhosts entry allowing > access for the remote user. > > Is there any way of achieving remote access for the Database without having to > grant login or other remote command access. Mark, I have discovered a bug (feature ?) of Informix-NET in that when doing its trusted host validation it takes the last entry as overriding earlier ones. Our system software takes the first entry as overriding later ones, so I have tried the following /etc/hosts.equiv file :- -{host name} +{host name} which allows Informix to talk (as the trusted host check passes), but does not allow other system utilities (rsh, rlogin, ..etc) to pass their trusted host checks. Please give it a try - as it might just be our version of Informix-Net. Regards, _ (_)__________________________________ | | /| | | Lionel Waugh (_|_____________________________ | | Systems Analyst | / | | AWA Defence Industries | / | | PO Box 161 | Phone: +61 8 256 0373 / | | Elizabeth SA 5112 | Fax: +61 8 255 9117 < | | Australia | Email: lwaugh@awadi.com.au \\ |_|________________________________| \\ | | (______________________________\\ | |