Informix

Informix

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only

  • 1.  Is Informix dependant on password cypher algorithm?

    Posted 06/06/25 09:13 AM

    Hi,

    IBM Informix Dynamic Server Version 11.70.FC5XE
    AIX 7.1.3.5

    While using a default pwd_algorithm (crypt) in /etc/security/login.cfg we have no problem connecting to Informix via network.
    To strengthen security I set pwd_algorithm to ssha512. After that users that renewed their passwords, thus cyphering them with SSHA512, lost an ability to directly log in to Informix via network.
    How to make it tolerable to more robust cyphers?



    ------------------------------
    Sincerely,
    Dennis
    ------------------------------


  • 2.  RE: Is Informix dependant on password cypher algorithm?

    Posted 06/06/25 09:19 AM

    chmod o+x /etc/security
    chmod o+r /etc/security/pwdalg.cfg

    Decide for yourself if this creates any security problem - I haven't found anyone yet capable of explaining one to me.

    Alternatively you'd had to switch to using PAM.



    ------------------------------
    Andreas Legner
    Informix Dev
    HCL Software
    ------------------------------



  • 3.  RE: Is Informix dependant on password cypher algorithm?

    Posted 06/06/25 09:25 AM

    Andreas,

    Yes, it works! Thank you!



    ------------------------------
    Sincerely,
    Dennis
    ------------------------------

    Original Message


  • 4.  RE: Is Informix dependant on password cypher algorithm?

    Posted 06/06/25 09:31 AM
    This approach was rejected at one of my sites after a security review, however using ACL  to control the access was allowed.

    PAM could not be used cos the client layer was still 3.70 CSDK and the customer didn't want to rebuild the entire app layer for PAM



    On 6/6/2025 8:19 AM, Andreas Legner via IBM TechXchange Community wrote:
    0100019745653f7e-785551b0-64b9-452a-af70-93c38afaa60b-000000@email.amazonses.com">
    chmod o+x /etc/security chmod o+r /etc/security/pwdalg.cfg Decide for yourself if this creates any security problem - I haven't found anyone yet...



    Original Message


  • 5.  RE: Is Informix dependant on password cypher algorithm?

    Posted 06/06/25 09:36 AM
    Edited by Dennis Melnikov 06/06/25 09:37 AM

    Paul,

    So, they are still using crypt?

    And, who made the security review?



    ------------------------------
    Sincerely,
    Dennis
    ------------------------------

    Original Message


Related Content