85 lines
6.5 KiB
HTML
85 lines
6.5 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Manage access using File Transfer Protocol exit programs" />
|
||
|
|
<meta name="abstract" content="You can use File Transfer Protocol (FTP) exit points to protect the iSeries from this topic." />
|
||
|
|
<meta name="description" content="You can use File Transfer Protocol (FTP) exit points to protect the iSeries from this topic." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqrzaiqimplement.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqftpanon.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqreferenceexit.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqsvreqep.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqlepi.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqpsvrep.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqrzaiqhacker.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqinstep.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqremep.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiqrzaiqhacker.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzaiqftpscon" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Manage access using File Transfer Protocol exit programs</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzaiqftpscon"><a name="rzaiqftpscon"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Manage access using File Transfer Protocol exit programs</h1>
|
||
|
|
<div><p>You can use File Transfer Protocol (FTP) exit points to protect
|
||
|
|
the iSeries™ from
|
||
|
|
this topic.</p>
|
||
|
|
<p>FTP provides a security level based on the i5/OS™ object
|
||
|
|
security. This means that remote users cannot log on to the iSeries FTP
|
||
|
|
server unless they have a valid user profile and password.</p>
|
||
|
|
<p>You can provide additional security by adding FTP exit programs to the
|
||
|
|
FTP Server and Client exit points to further restrict FTP access to your system.
|
||
|
|
For example, you can restrict FTP logon capability, as well as access to libraries,
|
||
|
|
objects, and the use of commands.</p>
|
||
|
|
<p>You can write an FTP Server Request Validation exit program to restrict
|
||
|
|
the CL commands and FTP subcommands that users can access.</p>
|
||
|
|
<p>You can control the authentication of users to a TCP/IP application server
|
||
|
|
with an exit program for the Server logon exit point.</p>
|
||
|
|
<p>You can write an FTP Client Request Validation exit program for the Client
|
||
|
|
exit point: Request validation. This controls which FTP client functions a
|
||
|
|
user may perform.</p>
|
||
|
|
<p>Depending on your situation, you might consider limiting access to FTP
|
||
|
|
subcommands using Application Administration Limit Access as an alternative
|
||
|
|
to writing exit programs for the FTP Server Request Validation and FTP Client
|
||
|
|
Request Validation exit points.</p>
|
||
|
|
<p>To allow the exit programs to work properly, you must Install and register
|
||
|
|
your exit point programs. If your programs are no longer needed, you must
|
||
|
|
properly Remove the exit point programs to prevent their future functioning.</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaiqrzaiqimplement.htm" title="You can protect your data by securing File Transfer Protocol (FTP) with Secure Sockets Layer (SSL), monitoring FTP users, and managing user access to FTP functions.">Secure File Transfer Protocol</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
||
|
|
<div><a href="rzaiqftpanon.htm" title="Anonymous File Transfer Protocol (FTP) enables remote users to use the FTP server without an assigned user ID and password.">Configure anonymous File Transfer Protocol</a></div>
|
||
|
|
<div><a href="rzaiqsvreqep.htm" title="The Request Validation exit points can be used to restrict operations which can be performed by FTP users. Request validation exit points are provided by both the FTP client and server; to restrict both FTP client and FTP server access, exit programs must be added to both exit points.">Request validation exit point: Client and server</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="reltasks"><strong>Related tasks</strong><br />
|
||
|
|
<div><a href="rzaiqrzaiqhacker.htm" title="You can limit access to File Transfer Protocol (FTP) server or client by using Application Administration in iSeries Navigator. Application Administration is component of iSeries Navigator that you can choose to install.">Manage access using iSeries Navigator</a></div>
|
||
|
|
<div><a href="rzaiqinstep.htm" title="You can create a library to contain your exit programs and their log files, compile the programs, and register them for use by the File Transfer Protocol (FTP) server.">Install and register exit programs</a></div>
|
||
|
|
<div><a href="rzaiqremep.htm" title="You can remove an installed exit program.">Remove exit programs</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relref"><strong>Related reference</strong><br />
|
||
|
|
<div><a href="rzaiqreferenceexit.htm" title="You can use File Transfer Protocol (FTP) exit programs to secure FTP. The FTP server communicates with each exit program through a specific exit point. This topic includes parameter descriptions and code examples.">File Transfer Protocol exit programs</a></div>
|
||
|
|
<div><a href="rzaiqlepi.htm" title="You can control the authentication of users to a TCP/IP application server with the TCP/IP Application Server Logon exit point.">Server logon exit point</a></div>
|
||
|
|
<div><a href="rzaiqpsvrep.htm">VLRQ0100 exit point format</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|