FTP Setup - Security Issues (1 viewing) (1) Guest
Favoured: 0
|
|
|
TOPIC: FTP Setup - Security Issues
|
ukpi1b (User)
Expert Boarder
Posts: 121
|
|
FTP Setup - Security Issues 5 Years, 4 Months ago
|
Karma: 0
|
|
Check following links. You could find answers to some of your questions <BR>
<a href="http://www.midrangeserver.com/mso/mso012202-story02.html">http://www.midrangeserver.com/mso/mso012202-story02.html</a> <BR>
<a href="http://publib.boulder.ibm.com/iseries/v5r1/ic2924/tstudio/tech_ref/tcp/indexfr.htm">http://publib.boulder.ibm.com/iseries/v5r1/ic2924/tstudio/tech_ref/tcp/indexfr.htm</a> <BR>
<a href="http://publib.boulder.ibm.com/iseries/v5r1/ic2924/index.htm?info/rzahgictcp2.htm">http://publib.boulder.ibm.com/iseries/v5r1/ic2924/index.htm?info/rzahgictcp2.htm</a> <BR>
<a href="http://www.tylogix.com/Articles/AS400FTP.htm">http://www.tylogix.com/Articles/AS400FTP.htm</a> <BR>
<a href="http://www.tylogix.com/Articles/AS400FTPQandA.htm">http://www.tylogix.com/Articles/AS400FTPQandA.htm</a>
|
|
|
|
|
|
|
ukpi1b
|
|
|
The administrator has disabled public write access.
|
|
|
|
FTP Setup - Security Issues 5 Years, 4 Months ago
|
Karma: 0
|
|
See <a href="http://www.mcpressonline.com/mc?
This e-mail address is being protected from spam bots, you need JavaScript enabled to view it
@.6ae5965a/1">This forum link</a>. I would also recommend <a href="http://www.bvstools.com">FTPTOOL</a>.
|
|
|
|
|
|
|
The administrator has disabled public write access.
|
|
|
|
FTP Setup - Security Issues 4 Years, 2 Months ago
|
|
|
Hmmm... seems like not much is happening in these forums lately. Hopefully, however, someone will be able to help me out. This is my third day looking all over the web trying to answer these questions, and so far no luck. :-( <p>We are setting our AS/400 (err, iSeries, v5r1) to allow access to it via FTP (primarily for EDI exchange). I've set up a test user profile with the following parameters: <BR>
USRCLS(*USER) <BR>
INLPGM(*NONE) <BR>
INLMNU(*SIGNOFF) <BR>
LMTCPB(*YES) <p>1) Are the Current library(CURLIB) and Home directory(HOMEDIR) parameters on the user profile relevant? If so, what should they be set to? How can you make a value in Home directory to be retained? When I FTP to AS/400 with the test profile, I get into QGPL library. NOT COOL! I tried changing the user's home directory on the user profile to a specially-created directory, but that value is not retained. If I look into the user profile, the value remains *SAME. <p>2) Is it possible to make the user log into a specific directory by default (not into a library, how it seems to be working now), or am I left with administering this with the logon exit point? <p>3) Per IBM's FTP manual: "Set the public libraries or directories and file authorities to PUBLIC *USE." Well, there is no *USE authority option on directories. Furthermore, there are no autority options on subdirectories at all! So ho can I set the system so the user cannot make any changes (rename, move, delete) to the directory and its subdirectories, yet be allowed to write files into one subdirectory and read/delete files from another? Exit points again? <p>4) Is there an easy way to check (CL command?) what user class the profile belongs to and allow all access to profiles with USRCLS(*SECOFR) only? Is there a secure way to have a listing of users that are allowed FTP access? The only think I can think of is to create a physical file with user names then check against it during a logon exit point, but that is way not secure! <p>Any comments/links/suggestions on the points above (and beyond) would be greatly appreciated! <p>Sergey Gorovoy
|
|
|
|
|
|
|
The administrator has disabled public write access.
|
|
|
|
FTP Setup - Security Issues 4 Years, 2 Months ago
|
|
|
hi Sergey - <p>Just wrestled with this one myself. In the TCPL0200 exit point format you'll find a parameter called application specific information. The first two bytes specify the name format & whether to use the current library or home directory. These both are binary bytes and should be set to %BIN(1), while the TCPL0200 format allows you to specify the intial home directory in parameter 12 and its length in parm 13. All four must be set for it to take. (ps - you don't have to adjust the length of the application specific field. It will come in the proper length.) <p>Good luck <p>Brian
|
|
|
|
|
|
|
The administrator has disabled public write access.
|
|
|
|
|