Manuals / IBM / Computer Equipment / Network Card

IBM Safenet/400 manual

Models: Safenet/400

1 172

Download 172 pages 49.63 Kb

Page 35

Basic Server Security - Supported by all Servers

Level 1 - IBM Default

Level 2 - No access to server

Intermediate Server Security - Supported by all Servers

Level 3	-	Users must be authorized to the server
Special
Level 3	-	*TELNET - controls signon by IP address

Advanced Server Security - Supported by Specific Servers

Level 4 - The user must be authorized to the server, the objects requested, the FTP Op or SQL Op, CL commands or long path to be used.

Supported by the following servers:

•Distributed Data Management Server

•Original Data Queue Server

•Network Printer Server - Spool file requests

•Integrated File Server

•Original Remote SQL Server

•Original File Transfer Function Server

•Original Virtual Print Server

•Database Server - Data base access

•Database Server - SQL access

•Data Queue Server

•Remote Command/Program Call Server

•FTP Server Request Validation

•FTP Client Request Validation

•REXEC Server request Validation

•Showcase Strategy** Server

	SafeNet/400 Reference Guide
	♥ Copyright 2008 MP Associates of Westchester, Inc.	2.5
	V8.50 - May 2008	2.5
	V8.50 - May 2008

Image 35

IBM Safenet/400 manual

Contents

MP Associates of Westchester, Inc SAFENET/400How to contact us Table of Contents 10.9 10.110.3 10.7Group Profiles Navigating through the screensLogging Level N Setting the User Logging LevelsLogging Level a Logging Level RSafeNet Administrator Super Trusted User Control Maintain User to Server Security screen appears Entering User Security LevelsALL Active Servers Work User to Object Security screen is displayed Add New Object Authorization screen appearsEntering User Authorities to Objects Not Allowed for library Not Allowed for objectReminder Exclusions Copyright 2008 MP Associates of Westchester, Inc V8.50 May Maintain Authorized SQL Statements screen appears Entering User Authorities to SQL StatementsWork User to SQL Statements screen is displayed Type the user profile, the Group or *PUBLIC, then EnterCopyright 2008 MP Associates of Westchester, Inc V8.50 May Work with Authorized FTP Statements screen appears Entering User Authorities to FTP StatementsType the user profile or *PUBLIC then Enter Path EncryptedList Format Using FTP ClientUsing FTP Server Name FormatType each CL command that this user is permitted to use Work User to CL Commands, Enter User ID screen is displayedMaintain Authorized CL Commands screen appears Copyright 2008 MP Associates of Westchester, Inc Maintain Path Names screen appears Entering Long Path NamesCopyright 2008 MP Associates of Westchester, Inc Remove Users from SafeNet screen appears Copy SafeNet User/Authorities screen is displayedRemoving a User from SafeNet/400 Maintain all Security for a User Authorized to At this time? Setting up Time of Day ControlsType the user profile, Enter and then press F10 User Time-of-Day Maintenance screen appearsCopyright 2008 MP Associates of Westchester, Inc V8.50 May Copyright 2008 MP Associates of Westchester, Inc Setting UP Servers Level SafeNet/400 Server Function Security LevelsLevel Setting the Server Function Logging Levels Advanced Server Security Supported by Specific Servers Basic Server Security Supported by all ServersIntermediate Server Security Supported by all Servers Level 1, Log None Recommended Server SettingsLevel 1, Log None Level 3, Log All Limit user Distributed Data ManagementLevel 1, Log All Log all requests PwrdwnsysMaintain Server Security screen is displayed Entering Server Function Security LevelsCopyright 2008 MP Associates of Westchester, Inc Customer Exit Programs Copyright 2008 MP Associates of Westchester, Inc Setting up Telnet Restricting Access to Specific Device Names Controlling Telnet Access by IP AddressSetting the Required Password Type Allow Auto Signon Enter the password type 0 or 1 is requiredLogging of Telnet Sessions Type Wrksrv Setting up TCP/IP Address ControlsTurning on TCP/IP Address Checking Example Setting up TCP/IP Address Control TableCopyright 2008 MP Associates of Westchester, Inc Anonymous FTP Logon Libname Parameter Screen Selections Value DescriptionUse Wrktcpipa *FTPSERVER Use Wrktcpipa *FTPCLIENTRecommended that you leave this as ProfilenamePword Password of *NONE and *USER forLocate the FTP Logon Server point Setting up for Anonymous FTPExample Page Select Option 6 Work with User to CL Command Security Setting up for Normal User IDs and FTP ServersPage Dynamic Host Configuration Protocol Dhcp Control and Reports Menu appears Working with DhcpCurrent Dhcp Activity Copyright 2008 MP Associates of Westchester, Inc Maintaining MAC Addresses Fixed IP Addresses Purging Expired Dhcp Lease Information Ping Checker Reports Setup Reports Usage Reports Copyright 2008 MP Associates of Westchester, Inc Security Report by User in test mode Menu SN4, Option Testing Your Security SettingsCopyright 2008 MP Associates of Westchester, Inc Security Levels to Check field Copyright 2008 MP Associates of Westchester, Inc Copyright 2008 MP Associates of Westchester, Inc V8.50 May On the Print Security Report screen fill in the following Batch Transaction Test Review/Report Security Report by UserCopyright 2008 MP Associates of Westchester, Inc V8.50 May Copyright 2008 MP Associates of Westchester, Inc Recommended approach to testing Pcreview Copyright 2008 MP Associates of Westchester, Inc V8.50 May Copyright 2008 MP Associates of Westchester, Inc Log file Purge Strprg DAYS060 To perform a standard purgeStrprgarc DAYS060 ARC*YES PRT*YES PRTR*NO RMVDEL*NO To purge the log and archive the recordsAutomating the One Step Security Report Automating the log file purgeStrprgarc DAYS005 Strprgarc DAYS001 Chgspcset LOGALL*YES to begin logging Daily Backup ProcedureEnter command Chgspcset LOGALL*NO Copyright 2008 MP Associates of Westchester, Inc Before de-activating De-activating SafeNet/400To activate or de-activate SafeNet/400 Removing SafeNet/400 from your system Copyright 2008 MP Associates of Westchester, Inc 10.1 Error Message Received on the System10.2 10.3 Error Message Received on the ClientCheck the request log for a ‘REJECTED’ response 10.4 10.5 10.6 If you still cannot resolve the problemAlso try Endtcpsvr *ALL, Endhostsvr *ALL then Strtcp 10.7 Examples of Client Error Messages10.8 10.9 Error Codes which Appear in the Log10.10 10.11 Additional Troubleshooting Tips10.12 11.1 Resetting Level 5 within SafeNet/40011.2 Select Option 6 Activate/De-Activate SafeNet/40011.3 Pre-Power Down Program Point11.4 Using Automatic Alert Notification11.5 Activating SafeNet/400 Alert NotificationCreating a Distribution List 11.6 Profile SwappingOPT SafeNet/400 RQD11.7 Setting up a Swap ProfileMaintain Authorized Swap Profiles screen appears 11.8 Journaling SafeNet/400 Security Files11.9 Errord FileFiles Contained in SafeNet/400 Traparcw File11.10 Trapod File11.11 SafeNet/400 CommandsCommands Description 11.12 11.13 Wrkusrsec11.14 12.1 Server Function Descriptions12.2 Original ServersLevels Supported Where usedServer Identifier Format Name12.4 12.5 Limitations12.6 12.7 Usrlibl ALL12.8 12.9 Original Message Server Description Original Message Server12.10 12.11 12.12 12.13 Optimized Servers12.14 12.15 12.16 12.17 12.18 12.19 Access to System i5 database through Odbc interfaceDatabase Server Entry Description Database Server Entry 12.21 Usage12.22 12.23 12.24 12.25 12.26 Data Queue Server Description Data Queue Server12.27 12.28 12.29 Access to entire file systemFile Server Description File Server Windows Explorer and other applications12.30 Allflr ALL12.31 Personnel ALL12.32 PAYROLL.LI SALARY.FIL12.33 Recommended Setting Level 4, Log AllUsage Notes/Limitations 12.34 12.35 FTP Logon Server Description FTP Logon Server 112.36 FTP Logon Server Description FTP Logon Server 212.37 FTP Logon Server Description FTP Logon Server 312.38 12.39 12.40 12.41 Pre-Power Down Description Pre-Power Down Server12.42 12.43 Rexec Logon Server Description Rexec Logon Server 1Usage Notes 12.44 Rexec Logon Server Description Rexec Logon Server 212.45 12.46 Important Notes on setting up a user for ShowCase** Strategy12.47 TCP Signon Server Description TCP Signon Server12.48 12.49 12.50 Server Identifier FormatIndex Public