How do I block transactions using RRM during specific time periods? (NETIQKB53983)

  • 7753983
  • 02-Feb-2007
  • 14-Aug-2007

Resolution

goal
How do I block transactions using RRM during specific time periods?

goal
I would like to block ODBC during specific time periods.

fact
NetIQ Security Solutions for iSeries 8.0

fact
Remote Request Management (RRM)

fix

To block transactions using RRM during specific time periods, use the following instructions:

  1. Verify that the "Public" rule secured entry is present:
    Go to the Work With Secured Entries screen (From PSMENU, take options 2, 3, and 1).
    Make sure that there is a rule present with value "Y" for the S, "*PUBLIC" for the User, "*ALL" for Network and "*PASS" for the Action fields.
  2. Put the ODBC exit points in Secure mode:
    From PSMENU, take options 2, 3, and 8. On the Work With Exit Points screen, take option 2 (Edit) for exit points:
    QIBM_QZDA_INIT
    QIBM_QZDA_NDB1
    QIBM_QZDA_NDB1
    QIBM_QZDA_ROI1
    QIBM_QZDA_ROI1
    QIBM_QZDA_SQL1
    QIBM_QZDA_SQL2     
    On the edit screen, change the Secured option to *YES and press Enter twice. Repeat this step for all exit points listed here.
  3. Create a calendar for blocking ODBC:
    From PSMENU, take options 2, 3, and 5. On the Work With Calendars screen, press F6 to add a new calendar.
    Fill in the calendar name and select *PASS as its default action. Press Enter twice.
    On the Maintain Calendar screen, select the days you want to block the ODBC transactions by using the X in the field in front of each day.
    Fill in the start and stop time and change action to *FAIL. Press Enter twice.
  4. Create a secured entry to block ODBC using the calendar:
    From PSMENU, take options 2, 3, and 1. Press F6 to add a new secured entry.
    On the "Add" screen, put in *PUBLIC for the User, *ALL for Network, :SQL for Operation and the calendar name for Action.
    Select Y for the enabled status and press Enter twice.

Everything is now set up to block DDM transactions during the days/times you have specified in the calendar definition.



Additional Information

Formerly known as NETIQKB53983