Re: some more questions about security...
On Fri, Aug 13, 1999 at 03:50:11PM -0700, Kenneth Topp wrote:
> Hello All,
>
> Looks like this group gives some good support, I cannot imagine
> why the FAQ doesn't have the security questions in it, but here goes:
>
> 1) Where is the Create Databases permission (so I can turn it off for
> public)
No Create Database permission at this time. May be in the next release :-)
>
> 2) Does everyone from different machines get mapped to public?
PUBLIC - any user that have a valid account record in the operating
system.
>
> 3) Must we portfilter on the router to achieve what tcp_wrappers would
> offer?
> Anyone try:
> virtual interface (or loopback) w/ informix listening on
> it
> then a tcp_wrappers proxy on the real interface?
> or shall I be the first....
>
You should try. I think it should work (although I didn't try it).
> 4) Does anyone actually run informix listening on tcp on a net connected
> host (IP please :)
I definitely don't :-)
>
> 5) Is there a SQL command to find out how you are logged in?
To get the login just use the USER function, like:
select USER
from systables
where tabid=1
Also you can get more information using dbinfo('sessionid') function, like:
SELECT username, uid, pid, hostname, tty
FROM sysmaster:syssessions
WHERE sid = dbinfo('sessionid')
>
> 6)a. If I start dbaccess logged in locally, can pass a parameter and be
> a different user.
> b. If I write a C program, the SDK would allow me to login as a
> different user?
You can. ESQL/C has the CONNECT statement in which you can
specify the USER username USING password clause.
>
> 7) Is "public" just scary?
>
> I know it's a lot of questions, but I promise I will answer all future
> questions on this newgroup
> on the subject... if I get the answers :)
>
> Email or repost, I will summerize if it's email..
>
> Kenneth Topp
> --------no spam please?---------
Best Regards,
Octav
--
Octav Chiriac Phone: (373) 2 22 99 67
NetInfo S.R.L. Fax: (373) 2 21 36 59
Chisinau (373) 2 22 84 88
Moldova, Republic of mailto:com@netinfo-moldova.com