Re: Protocol
Posted in 1997
Elisa Hoffman <elisa_hoffman@hp.com> wrote:
> Has anyone connected to an Informix UNIX database through a firewall?
>
Your firewall should not filter out the used Informix port -> see
sqlhosts/services entries.
> How does INFORMIX (on UNIX) using I-NET, via ISQL, validate and
confirm
> who the remote client is?
> - Is DNS used? If so, is the lookup based on IP address, where
> server name must be resolved.
The Informix Server makes a normal gethostbyaddr() with the clients IP
address and compares this (converted hostname) string with
/etc/hosts.equiv .
>
> - If the client server IP address and name are added to /etc/hosts
> on the database server, would Informix dynamically pick up the
> additional entry if the system is configured so that lookup first
> occurs on the /etc/hosts file before checking DNS?
This depends on your network name resolver configuration. (normally
/etc/resolv.conf ) There you can configure if /etc/hosts, DNS or YP/NIS
will be used and in which order.
Note that in case of rejecting a connection the online server writes an
entry in its logfile with the resolved network name of the client
maschine. If you add this entry (without the username@) to
/etc/hosts.equiv the connection should work.
example:
13:54:08 listener-thread: err = -956: Client host or user(my_username@clienthost.domain) is not trusted by the server.
so you should add "clienthost.domain" to "/etc/hosts.equiv".
Hope this helps
Uwe