Integrated MFA in IBM i 7.6: benefits, risks, setup
What it actually adds to system security, which profiles cannot use it, and the setup procedure with the order to follow.
What it actually adds to system security, which profiles cannot use it, and the setup procedure with the order to follow.
FTP, ODBC and data transfer reach the database without going through menus. The two SQL views for checking who controls that access.
QCRTAUT defaults to *CHANGE, so public authority is wider than anyone decided. How to measure it with SQL before restricting it.
IBM has released an ACS update closing known vulnerabilities. Why it cannot be postponed and how to check the installed version.
QAUDJRN is not on by default and cannot be enabled retroactively. The command to turn it on, the functions to query it, and the library they live in.
No revolution, but three or four things that take manual work off whoever administers the system. And one that concerns anybody sending mail from it.
Many installations run on users who hold *ALLOBJ because "otherwise it does not work". How you end up there, and how to get out without stopping anybody's work.
Special authorities, object authorities, groups, lists and adopted authority, the QSECURITY levels. With the queries to see who can do what.