RE: SQL Connect v DDM Files

["DeLong, Eric" <EDeLong@xxxxxxxxxxxxxxx>]

But this has no effect on the CONNECT TO statement in embedded SQL.
USERID/password is always required for this...  

For interactive jobs, this is not such a big deal, since you can simply
prompt the user for the login credentials when opening the connection.
But in batch, you still need a secure repository for these service
profiles and passwords.  

I guess this is the piece I'd like to find a solution for...  I think
back over the years of all the FTP scripts where login data was embedded
in the script.  Or DOS batch jobs running file transfer, or rpc calls to
launch a program remotely...  All of these require user/pass details to
be embedded in the script.

PCI frowns on the notion of passwords in clear text, and it is easy to
understand why this is not considered good practice.  So, what would be
a best-practice approach to eliminate hard coded credentials in source
code? Ideally, this could support DB2 ENCRYPT_RC2() passwords as well.

Just wondering how everyone else handles this...
-Eric DeLong

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chris Bipes
Sent: Tuesday, October 13, 2009 9:48 AM
To: Midrange Systems Technical Discussion
Subject: RE: SQL Connect v DDM Files

You can set the security in the DDM server with OPS NAV or via command
CHGDDMTCPA

 

Chris Bipes
Director of Information Services
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Vern Hamberg
Sent: Monday, October 12, 2009 7:14 PM
To: Midrange Systems Technical Discussion
Subject: Re: SQL Connect v DDM Files

Hi Eric

I wasn't clear whether the OP needs to JOIN the files. On second read, 
it is kind of implied. And the user/password thing is a bit of a pain. 
Is there some setting in CHGNETA that controls DDM security?

I don't know DB2 Multi either - seems I heard that it kind of puts 
different parts of tables on various systems, but don't quote me.

I an intrigued by the federation facility of DB2 Connect - PC-based 
component - it is possible to have several kinds of RDBMS joined in a 
single statement. I think!

Tomorrow, more fun at the RPG & DB2 Summit!