============================================================= SEARCH400.COM | Security Tip Oct. 8, 2002 ============================================================= FROM OUR SPONSORS:
Bytware announces All-in-One Security for the iSeries. Free trial http://search400.com/r/0,,6400,00.htm?bytware ============================================================= Essential explanations and tools to help secure the iSeries. More tips: http://search400.techtarget.com/tipsIndex/0,289482,sid3_tax2f8,00.html ============================================================= In today's technical advice roundup you'll find tips, expert answers and input from your peers to the following iSeries security questions and concerns: Today's Featured Security Tip: -- Use group profiles for easier security admin Answers to Other Technical Questions: 1. Unique user profiles are critical to OS/400 security 2. iSeries security profile 3. Choosing your security level 4. Rights associated with a group profile Important Announcements and Links - Tips Contest: September winners announced - Search400 IT Excellence Awards: Accepting nominations now - Expert profile: Dan Riehl, Search400.com security expert - Search400 Salary Survey: Are you earning enough? - Advice: Managing the iSeries Discussion Forum _______________________________________________________________ ******************* SPONSORED BY Bytware ********************** Security is complex, managing it doesn't have to be! Order STANDGUARD today and put an end to your security fears. Real- time security solution allowing easy and quick enforcement of security policies across a network of multiple systems. Secures FTP, ODBC, SQL, Telnet, DDM/DRDA, NetServer, Commands and more...; audit journal monitoring; event logging; reporting; auditing; notification and more....ORDER your FREE trial today, visit http://search400.com/r/0,,6400,00.htm?bytware or call (775) 851-2900. =========================================================== Today's Featured Tip =========================================================== Use group profiles for easier security admin | By Rich Loeber Administering security on your iSeries system can be a daunting challenge. If you're a small shop with just a dozen users and one or two critical applications, then it is a manageable task. But if you're in a large shop with hundreds (or thousands) of user profiles, managing the security considerations can quickly become a mind-boggling task. Fortunately, for those who have thousands of profiles to consider, OS/400 includes some very nice tools that let you group your users together in homogeneous work-related groups. Using this approach, each user can be classified according to the type of work he or she does and then assigned to a group. After that, all you need to do is manage the group and not each and every individual user. >> CLICK here for the full tip: http://www.search400.com/tip/1,289483,sid3_gci855130,00.html ============================================================= Answers to Other Security Questions ============================================================= 1. Unique user profiles are critical to OS/400 security According to Search400.com member Steve Martinson, using unique user profiles is critical to effective user accountability and overall iSeries security. Check out this tip and see what Steve says is the best format for profiles. >> CLICK her to view the complete tip: http://www.search400.com/tip/1,289483,sid3_gci853267,00.html 2. iSeries security profile One user writes, "My user profile is the same as my iSeries security profile. I'm concerned that when developers or support teams use the SBMJOB command they can put my profile or jobd -- that has more authority then their own profile -- in sbmjob user parameter. Is there way we can block this parameter, or can we force them to use their own user profile?" Search400.com's security expert Carol Woodbury offers some advice. http://search400.techtarget.com/ateQuestionNResponse/0,289625,sid3_cid471186_tax288767,00.html 3. Choosing your security level Your iSeries may have tight security, but what about your installation? Your first decision about security on your system is found in the setting for the QSECURITY system value. You can see your current security level setting by running the "Display Security Attributes" (DSPSECA) command. The last item on the display will be your current QSECURITY level setting. Is that the appropriate level for you? This tip describes the different levels and what to expect if you need to step up security. http://www.search400.com/tip/1,289483,sid3_gci832069,00.html 4. Rights associated with a group profile One user writes, "I am trying to determine all rights associated with a group profile as a first step to clean up the group. Can you help me with the command?" OS/400 expert Ken Graap responds. http://search400.techtarget.com/ateQuestionNResponse/0,289625,sid3_cid388937_tax285220,00.html _____________________________________________________________ ::::::: DON'T MISS THESE IMPORTANT MESSAGES AND LINKS :::::: =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- SEPTEMBER WINNERS ANNOUNCED | Search400.com tips contest You've been patient all month, and the results are finally in... The top winner for Search400's Tips Contest for September is Manolis Mariakakis. Manolis won a Futuristic Mega stereo and was added to our Hall of Fame for his tip: "Convert spooled files to PDF using Java," http://www.search400.com/tip/1,289483,sid3_gci847978,00.html Congratulations also to our runner-up winners: Nico Beekhuijs and Jeff Worthington. View all winning tips in Search400's Hall of Fame: http://search400.techtarget.com/tipsHallOfFame/0,289489,sid3_prz826588_cts826578,00.html NEW CONTEST FOR OCTOBER: This month we're giving away a $50 Amazon.com gift certificate. Buy yourself something that you really want, rather than settling for something less. You can choose from several categories of items such as books, music, videos, electronics, gardening, toys, housewares and more. Submit a winning tip and treat yourself to something you really want at Amazon.com! Send in your tip -- you could be our next winner. >> SUBMIT a Tip: http://search400.techtarget.com/tipsSubmit/0,289485,sid3,00.htm l =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- ACCEPTING NOMINATIONS NOW | Search400 IT Excellence Awards We're on the lookout for medium- and large-scale companies that are blazing new trails in iSeries 400 computing. Are you pushing the limits of the iSeries server capacity or taking Web development for the iSeries to the next level? If so, then submit your nomination for Search400's IT Excellence Awards. This awards program recognizes the IT achievers at end-user companies who design, build and manage these complex technologies (no vendors, please). The deadline for submissions is Friday, Oct. 25, 2002. >> NOMINATE a company today: http://search400.techtarget.com/awards =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- EXPERT PROFILE | Dan Riehl, Search400.com security expert Dan Riehl is president of The 400 School, the popular iSeries training company, and co-founder of The Powertech Group, one of the leading providers of iSeries security software. Dan is a popular author and lecturer on iSeries security issues. His accomplishments include authorship of several AS/400 and iSeries technical books and numerous articles published in various iSeries magazines. Since 1988 he has been a technical editor and author for multiple iSeries magazines, and he is currently technical editor for IBM's eServer Magazine iSeries edition. In addition to his other tasks, Dan regularly performs in-depth iSeries security audits and provides instruction and consulting on iSeries security issues. Let Dan's experience work for you. Ask Dan Security-related questions anytime. >> CLICK HERE TO ASK Dan a question: http://search400.techtarget.com/ateQuestion/0,289624,sid3_tax288767,00.html >> CLICK HERE TO READ recent Q&As: http://search400.techtarget.com/ateAnswers/0,289620,sid3_cid423497_tax288767,00.html =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- ARE YOU EARNING ENOUGH? | Search400.com salary survey Take Search400.com's interactive salary survey and see where you stand. Is your salary similar to other iSeries professionals? Do you put in more hours than others who have the same job as you? Click over and find out. Results are updated daily. >> TAKE the salary survey today: http://search400.techtarget.com/salarySurveySkill/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- MANAGING THE ISERIES DISCUSSION FORUM | Interact with your peers Check out Search400.com's Managing the iSeries discussion forum. If you have a performance problem you just can't figure out, or you need help recovering data after a system crash, we recommend you check out this forum. Other system managers can help you with these and other management issues. >> RECENT DISCUSSION THREADS you may find of interest: * Enabling user profiles http://search400.discussions.techtarget.com/WebX?[EMAIL PROTECTED]@.ee84639/774 * Security on menu-based legacy application http://search400.discussions.techtarget.com/WebX?[EMAIL PROTECTED]@.ee84638/2084 _____________________________________________________________ ::::::::::::::::::: SEARCH400 CONTACTS ::::::::::::::::::: TIP MAILBOX, (mailto:[EMAIL PROTECTED]) >> Send us feedback on tips and ideas for new tip content. _____________________________________________________________ MICHELLE DAVIDSON, Site Editor (mailto:[EMAIL PROTECTED]) >> Send us your story ideas and best practices. _____________________________________________________________ DEBRA TART, Assistant Editor (mailto:[EMAIL PROTECTED]) >> Send us your tips and Best Web Links. _____________________________________________________________ DAVID GABEL, Executive Tech Editor (mailto:[EMAIL PROTECTED]) >> Send me your technical tips and tip ideas. _____________________________________________________________ GABRIELLE DERUSSY (mailto:[EMAIL PROTECTED]) >> Sponsor this or any other TechTarget newsletter. _____________________________________________________________ :::::::::::::::::::: ABOUT THIS NEWSLETTER:::::::::::::::::: Published by TechTarget (http://www.techtarget.com) TechTarget - The Most Targeted IT Media Copyright 2002 TechTarget. All rights reserved. If you no longer wish to receive this newsletter simply reply to this message with "REMOVE" in the subject line. Or, visit http://search400.techtarget.com/register and adjust your subscriptions accordingly.If you choose to unsubscribe using our automated processing, you must send the "REMOVE" request from the email account to which this newsletter was delivered. Please allow 24 hours for your "REMOVE" request to be processed.
