Re: Security Considerations with Object Connect

Wouldn't surprise me that it's wide open...

"peer" means something at the same level.

SNA isn't something normally set up between untrusted machines. It's
something set up between machines you own.

Charles


On Fri, Aug 7, 2020 at 6:40 AM Patrik Schindler <poc@xxxxxxxxxx> wrote:

Hello Rob,

Am 05.08.2020 um 13:37 schrieb Rob Berendt <rob@xxxxxxxxx>:

But, what are you using SNA for?

I'm a retrocomputing hobbyist. I want to use SNA because it is less
straining on a 150's CPU. I want to experiment with SNADST and OfficeVision.

My concern is that when I have an APPN peer machine who is not controlled
by me (another fellow hobbyist with his own QSECOFR access to that said
peer machine), he can sign on to his machine and probably abuse
ObjectConnect to overwrite vital components of my system, or at least some
data on my machine.

All other things I'm aware of, like pasthrough, tn5250, ftp, ODBC, go
though authentication, so I have control.

The most basic fundamental security of IBM i is to secure the data.

This is not helpful when the other side is doing SAVRST as QSECOFR.

But thanks for picking up the subject, and your suggestions!

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com