Anonymous Monk has asked for the wisdom of the Perl Monks concerning the following question:

I would like someone's personal opinion in connecting to a AS400 system using ODBC. How unsecured is it? Can anyone give a feed back on this issue, since the AS400 people keeping saying that ODBC isn't secure at all. Thank you all!!!

janitored by ybiC: Renamed from "ODBC".

Replies are listed 'Best First'.
Re: (OT) Connecting to AS400 with ODBC, no perl content whatsoever
by ptkdb (Monk) on Nov 17, 2003 at 17:14 UTC
    ODBC is a protocol/specification for accessing databases. By itself, it does not include crypto, although it will pass usernames and passwords onto the database that it's connecting to. However, by themselves, usernames and passwords only provide the illusion of security.

    You could probably make it secure by running it through SSL: Google

Re: (OT) Connecting to AS400 with ODBC, no perl content whatsoever
by Ninthwave (Chaplain) on Nov 17, 2003 at 17:22 UTC

    From the devil's mouth:
    MSDN
    Better yet a google search: Google search for odbc security
    In perl try dbi
    Security in DBI thread: Read the whole thread.
    And a google search: Google search on dbi security
    But where is the perl???

    In a general note securing databases have different methods. When you automate a database connection the automation opens up some possible places for exploits. Always scope the processes and related id's in what they need to do and limit access accordingly. Limit the connections on an IP basis if possible. But that discussion is in itself maybe best for other areas.

    "No matter where you go, there you are." BB