Usage WIN32PASS

Posted in 2007

Topics: Security, Permissions & Auditing

Schuran, Sven — Wed, 12 Dec 2007 14:06:49 — source: IIUG Forums & Mailing Lists

Hi, there are several env variables for Informix and Microsoft Windows like: WIN32USER and WIN32PASS Is ist possible to fill WIN32USER and WIN32PASS with the Windows username and userpassword? Thanks Sven -------------------------------------------------------------------- Sie finden uns im Internet unter: www.maske.de Maske AG Behringstraße 120 22763 Hamburg Handelsregister Hamburg HRB 83369 USt-Ident.-Nr. DE 116 923 883 Vorstand: Andreas Maske Vors. d. Aufsichtsrates: Wolfgang Hönen Diese e-mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese e-mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene e-mail. Vielen Dank. This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.

↪ replying to Schuran, Sven

Guy . — Wed, 12 Dec 2007 15:48:18 — source: IIUG Forums & Mailing Lists

You're referring to overriding the setnet32 information with environment variables? http://publib.boulder.ibm.com/infocenter/idshelp/v111/index.jsp?topic=/com.ibm.c pi.doc/ids_cw_023.html Do you mean getting these values from the OS and populating those variables without knowing them? If not I may have misunderstood. You could get the user name from the OS, but not the password, that would need to be entered into the program or elsewhere. Regards Guy ----- Original Message ---- From: "Schuran, Sven" <sschuran@maske.de> To: ids@iiug.org Sent: Wednesday, December 12, 2007 6:06:49 AM Subject: Usage WIN32PASS [10719] Hi, there are several env variables for Informix and Microsoft Windows like: WIN32USER and WIN32PASS Is ist possible to fill WIN32USER and WIN32PASS with the Windows username and userpassword? Thanks Sven -------------------------------------------------------------------- Sie finden uns im Internet unter: www.maske.de Maske AG Behringstraße 120 22763 Hamburg Handelsregister Hamburg HRB 83369 USt-Ident.-Nr. DE 116 923 883 Vorstand: Andreas Maske Vors. d. Aufsichtsrates: Wolfgang Hönen Diese e-mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese e-mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene e-mail. Vielen Dank. This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation. ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ________________________________________________________________________________ ____ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping

↪ replying to Guy .

Schuran, Sven — Thu, 13 Dec 2007 13:22:39 — source: IIUG Forums & Mailing Lists

Hi, I like to override the setnet32 information. Cause my Linux/Informix Server is connected to Active Directory, so I am not able to setup setnet32 with correct Password, cause it may change. There is no SSO inside the client, so I like to read ther username (thats easy) and like to read the password-hash. May be there is another way, I have to use username/passwords when connecting to database, but I dont like to create the users on my linux System, cause they are avaialabe through Active Directory. Someone mentoined hosts.equiv, but this is not secure enough. Sven -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Guy . Sent: Wednesday, December 12, 2007 4:48 PM To: ids@iiug.org Subject: Re: Usage WIN32PASS [10727] You're referring to overriding the setnet32 information with environment variables? http://publib.boulder.ibm.com/infocenter/idshelp/v111/index.jsp?topic=/com.ibm.c pi.doc/ids_cw_023.html Do you mean getting these values from the OS and populating those variables without knowing them? If not I may have misunderstood. You could get the user name from the OS, but not the password, that would need to be entered into the program or elsewhere. Regards Guy ----- Original Message ---- From: "Schuran, Sven" <sschuran@maske.de> To: ids@iiug.org Sent: Wednesday, December 12, 2007 6:06:49 AM Subject: Usage WIN32PASS [10719] Hi, there are several env variables for Informix and Microsoft Windows like: WIN32USER and WIN32PASS Is ist possible to fill WIN32USER and WIN32PASS with the Windows username and userpassword? Thanks Sven ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ________________________________________________________________________________ ____ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. -------------------------------------------------------------------- Sie finden uns im Internet unter: www.maske.de Maske AG Behringstraße 120 22763 Hamburg Handelsregister Hamburg HRB 83369 USt-Ident.-Nr. DE 116 923 883 Vorstand: Andreas Maske Vors. d. Aufsichtsrates: Wolfgang Hönen Diese e-mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese e-mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene e-mail. Vielen Dank. This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.

↪ replying to Schuran, Sven

Guy . — Fri, 14 Dec 2007 05:24:58 — source: IIUG Forums & Mailing Lists

Sven, It might help to read this article by Fernando Nunes: http://informix-technology.blogspot.com/2007/11/informix-user-authentication-pam -for.html which describes connecting from Linux and authenticating via Active Directory. Regards Guy ----- Original Message ---- From: "Schuran, Sven" <sschuran@maske.de> To: ids@iiug.org Sent: Thursday, December 13, 2007 5:22:39 AM Subject: RE: Usage WIN32PASS [10745] Hi, I like to override the setnet32 information. Cause my Linux/Informix Server is connected to Active Directory, so I am not able to setup setnet32 with correct Password, cause it may change. There is no SSO inside the client, so I like to read ther username (thats easy) and like to read the password-hash. May be there is another way, I have to use username/passwords when connecting to database, but I dont like to create the users on my linux System, cause they are avaialabe through Active Directory. Someone mentoined hosts.equiv, but this is not secure enough. Sven -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Guy . Sent: Wednesday, December 12, 2007 4:48 PM To: ids@iiug.org Subject: Re: Usage WIN32PASS [10727] You're referring to overriding the setnet32 information with environment variables? http://publib.boulder.ibm.com/infocenter/idshelp/v111/index.jsp?topic=/com.ibm.c pi.doc/ids_cw_023.html Do you mean getting these values from the OS and populating those variables without knowing them? If not I may have misunderstood. You could get the user name from the OS, but not the password, that would need to be entered into the program or elsewhere. Regards Guy ----- Original Message ---- From: "Schuran, Sven" <sschuran@maske.de> To: ids@iiug.org Sent: Wednesday, December 12, 2007 6:06:49 AM Subject: Usage WIN32PASS [10719] Hi, there are several env variables for Informix and Microsoft Windows like: WIN32USER and WIN32PASS Is ist possible to fill WIN32USER and WIN32PASS with the Windows username and userpassword? Thanks Sven ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ________________________________________________________________________________ ____ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. -------------------------------------------------------------------- Sie finden uns im Internet unter: www.maske.de Maske AG Behringstraße 120 22763 Hamburg Handelsregister Hamburg HRB 83369 USt-Ident.-Nr. DE 116 923 883 Vorstand: Andreas Maske Vors. d. Aufsichtsrates: Wolfgang Hönen Diese e-mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese e-mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene e-mail. Vielen Dank. This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation. ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ________________________________________________________________________________ ____ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

↪ replying to Guy .

Schuran, Sven — Fri, 14 Dec 2007 09:36:15 — source: IIUG Forums & Mailing Lists

Hi, That is a nice article, but authentication is already there via samba/winbind. My question is: How is it possible to have an automatic login to informix, without entering username/password to setnet32. Sven -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Guy . Sent: Friday, December 14, 2007 6:25 AM To: ids@iiug.org Subject: Re: Usage WIN32PASS [10755] Sven, It might help to read this article by Fernando Nunes: http://informix-technology.blogspot.com/2007/11/informix-user-authentication-pam -for.html which describes connecting from Linux and authenticating via Active Directory. Regards Guy ----- Original Message ---- From: "Schuran, Sven" <sschuran@maske.de> To: ids@iiug.org Sent: Thursday, December 13, 2007 5:22:39 AM Subject: RE: Usage WIN32PASS [10745] Hi, I like to override the setnet32 information. Cause my Linux/Informix Server is connected to Active Directory, so I am not able to setup setnet32 with correct Password, cause it may change. There is no SSO inside the client, so I like to read ther username (thats easy) and like to read the password-hash. May be there is another way, I have to use username/passwords when connecting to database, but I dont like to create the users on my linux System, cause they are avaialabe through Active Directory. Someone mentoined hosts.equiv, but this is not secure enough. Sven -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Guy . Sent: Wednesday, December 12, 2007 4:48 PM To: ids@iiug.org Subject: Re: Usage WIN32PASS [10727] You're referring to overriding the setnet32 information with environment variables? http://publib.boulder.ibm.com/infocenter/idshelp/v111/index.jsp?topic=/com.ibm.c pi.doc/ids_cw_023.html Do you mean getting these values from the OS and populating those variables without knowing them? If not I may have misunderstood. You could get the user name from the OS, but not the password, that would need to be entered into the program or elsewhere. Regards Guy ----- Original Message ---- From: "Schuran, Sven" <sschuran@maske.de> To: ids@iiug.org Sent: Wednesday, December 12, 2007 6:06:49 AM Subject: Usage WIN32PASS [10719] Hi, there are several env variables for Informix and Microsoft Windows like: WIN32USER and WIN32PASS Is ist possible to fill WIN32USER and WIN32PASS with the Windows username and userpassword? Thanks Sven ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ________________________________________________________________________________ ____ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. ________________________________________________________________________________ ____ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum. -------------------------------------------------------------------- Sie finden uns im Internet unter: www.maske.de Maske AG Behringstraße 120 22763 Hamburg Handelsregister Hamburg HRB 83369 USt-Ident.-Nr. DE 116 923 883 Vorstand: Andreas Maske Vors. d. Aufsichtsrates: Wolfgang Hönen Diese e-mail kann Betriebs- oder Geschäftsgeheimnisse oder sonstige vertrauliche Informationen enthalten. Sollten Sie diese e-mail irrtümlich erhalten haben, ist Ihnen eine Kenntnisnahme des Inhalts, eine Vervielfältigung oder Weitergabe ausdrücklich untersagt. Bitte benachrichtigen Sie uns und vernichten Sie die empfangene e-mail. Vielen Dank. This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation.