Re: Access Client Solutions (ACS) and remote commands

Here's the problem with that. Remote command was deemed to be a major
security hole. There are some CVE's out there regarding this. There was
quite a thread on this awhile back. I'll see if I can find it...

Ok, the problem was that a PC having rexec open on it is considered a
security ding. We run security scans from Qualys (corporate edict). They
want that shutdown, now. Most of my concern was the edict to shut it down
on IBM i so people couldn't execute a remote command on it. You're more
concerned with the remote command service on the PC.
http://archive.midrange.com/midrange-l/201604/msg01120.html

The Knowledge Center says you need a REXECD daemon for TCP or a AREXECD
daemon for appc running on your pc to service requests from RUNRMTCMD from
your IBM i.
The deprecated IBM i Access for Windows provided such a service. The
newer IBM i Access Client Solutions does not.


Rob Berendt