[3993] in WWW Security List Archive
Re: OS/390 and WWW
daemon@ATHENA.MIT.EDU (Shin Katsumata)
Wed Jan 15 20:44:48 1997
Date: Wed, 15 Jan 1997 17:07:06 +0000 ()
From: Shin Katsumata <skat@flask.com>
To: Arjan Vos <arjan@pino.demon.nl>
cc: www-security@ns2.rutgers.edu
In-Reply-To: <Pine.LNX.3.95.970115233713.416A-100000@pino.demon.nl>
Errors-To: owner-www-security@ns2.rutgers.edu
I don't expect to find payroll information out on intranet, however, I
would not mind getting access to information on web, which are currently
only available on 3270 terminals, like which parts are available in
stock, which parts are being used in other products (prefered parts),
project status, etc,
Many large corporations do keep more information on a mainframe than just
payroll. As for your suggestion to query DB2 instead of web server sounds
good, but what about pre-DB2 databases? Could we still setup a unix
server to query mainframe? Probably, but which path is easier. I doubt
many corporations would want to spend too much time with pre-DB2
databases, since they are probably in process of eliminating them. Web
Server on OS/390 may be the easiest way to serve the information until
they pull the plug.
SK
On Wed, 15 Jan 1997, Arjan Vos wrote:
>
> On Wed, 15 Jan 1997, Shin Katsumata wrote:
>
> > Just one word,
> >
> > Intranet
> >
<snip>
>
> I don't think your payroll data need to be accessible by all employees. I
> know you can secure a lot, but I think is very hard for "mainframe"-people
> to have them getting used to the world of "open communications". I'm
> curious how that will evolve.
<snip>
>
> >
> > On Wed, 15 Jan 1997, Arjan Vos wrote:
> >
> > >
> > > Just some questions popping into my mind:
> > >
> > > IBM is now offering OS/390 with spec1170-complient UNIX intergrated and
> > > TCP/IP etc. As far I can see IBM's main goal is to offer "open
> > > computing" to their exisiting clients with (huge) corporate databases
> > > (formerly) under MVS. Though UNIX is integrated, all security-related
> > > measures are still being done under RACF or ACF or whatsoever.
> > >
> > > But, why would one want their corporate datatabes connected to the Net? It
> > > is now possible to query DB2 databases, like in UNIX they've been doing
> > > with Oracle databases since ages :-))
> > > As far as I can see, one would not want to place corporate databases, or
> > > high-transactional online systems on the Internet in the first place....
> > <snip>
> >
>
> --
> Eat hard
> Sleep hard
> Wear glasses if you need them
>
>
