Informix

Informix

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  Autenthication on IDS 11.50 server on WINDOWS

    Posted Mon July 24, 2023 11:51 AM

    Hi Folks

     

    I hope everybody is doing good

    I have a stupid question regarding security on windows

     

    for a user to be authenticated on a xNIX IDS server, you need either to declare the client hosts in /etc/hosts.equiv file + declare a ~/.rhost file is the user's directory on the IFMX server

    OR

    starting 12.10, use both files declared for the ONCONFIG parameter REMOTE_SERVER_CFG and REMOTE_USERS_CFG the $INFORMIXDIR/etc/$ONCONFIG

     

    but how can I do the same with IFMX 11.50 on a WINDOWS server ?

     

    my customer is due to migrate to a recent version, but had enormous production damage and needs to rebuit a new instance 'AS IS' from scratch.

     

    We are almost done, we just need to autenthicate users and the official doc is  ... how can I say .....

     

    Thanks a lot

     

    eric

     

    Eric Vercelletto
    Data Management Architect and Owner / Begooden IT Consulting
    KandooERP Founder and CTO
    IBM Champion 2013,2014,2015,2016,2017,2018,2019,2020
    ibm-champion-rgb-130px

    Tel:     +33(0) 298 51 3210
    Mob : +33(0)626 52 50 68
    skype: begooden-it
    Google Hangout: eric.vercelletto@begooden-it.com
    Email:
    eric.vercelletto@begooden-it.com
    www :
    http://www.vercelletto.com
    www  https://kandooerp.org

     

     



  • 2.  RE: Autenthication on IDS 11.50 server on WINDOWS

    Posted Mon July 24, 2023 12:23 PM

    Hi Eric,

    by "authenticate" you obviously mean "trust" (which could be called the opposite of authenticate ;-) )?

    Why would you think the REMOVER_SERVER_CFG + REMOTE_USERS_CFG would not apply equally to IDS on Windows?

    (And, btw., even "/etc/hosts.equiv" used to work on Windows, you only had to correctly locate it under %WINDIR%/system32/drivers/etc ... not sure this still is supported, though, but I'd assume nothing changed in Informix in this respect. I'm, of course, not advocating this approach!)

    BR,

     Andreas



    ------------------------------
    Andreas Legner
    ------------------------------



  • 3.  RE: Autenthication on IDS 11.50 server on WINDOWS

    Posted Tue July 25, 2023 04:11 AM

    Hi Andreas,

     

    Thanks for enhancing my security culture, I need that LOL!

     

    The question is that we are talking about IDS 11.50, and iMO REMOVER_SERVER_CFG has been introduced in 12.10 XXN ( or even 14.10, not sure).

     

    I will apply the hosts.equiv as you said.

     

    Thanks and have a great day!

    ERic

     

    Eric Vercelletto
    Data Management Architect and Owner / Begooden IT Consulting
    KandooERP Founder and CTO
    IBM Champion 2013,2014,2015,2016,2017,2018,2019,2020
    ibm-champion-rgb-130px

    Tel:     +33(0) 298 51 3210
    Mob : +33(0)626 52 50 68
    skype: begooden-it
    Google Hangout: eric.vercelletto@begooden-it.com
    Email:
    eric.vercelletto@begooden-it.com
    www :
    http://www.vercelletto.com
    www  https://kandooerp.org