HP3000-L Archives

August 2007, Week 2

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Arthur H Bahrs <[log in to unmask]>
Reply To:
Arthur H Bahrs <[log in to unmask]>
Date:
Mon, 13 Aug 2007 10:10:40 -0700
Content-Type:
text/plain
Parts/Attachments:
text/plain (136 lines)
Hi Rajesh ;)
    Um... first of all I am not all that comfortable putting out how to
access a database that you / your program may or may not be cleared to
access....

    Second... some good points below on the possible causes...

    Third, the most basic answer is you have not been granted access to the
database  (ABDBX) by the appropriate authorities (normally the data owner,
data custodian, and potentially the DBA for the database)
    Note that IIRC (and we all know about my memory! hehehe) if you are
granted the access you can provide the appropriate passwords and get access
released or not.

Thanks,
Art "dim past mixed with infosec knowledge" Bahrs
=======================================================
Art Bahrs, CISSP          Corporate Reporting         The Regence Group
(503) 225-4992               Cell 971-244-2459               FAX (503)
220-3806


                                                                           
                "rajesh"                                                   
                <rajeshkannan2                                             
                [log in to unmask]>                                            To 
                Sent by:               [log in to unmask]              
                "HP-3000                                                cc 
                Systems                                                    
                Discussion"                                        Subject 
                <HP3000-L@RAVE         [HP3000-L] MPE Security Violation   
                N.UTC.EDU>             error                               
                                                                           
                                                                           
                08/10/2007                                                 
                11:18 AM                                                   
                                                                           
                                                                           
                Please respond                                             
                      to                                                   
                   "rajesh"                                                
                <rajeshkannan2                                             
                 [log in to unmask]>                                              
                |------------|                                             
                | [ ] Secure |                                             
                |     E-mail |                                             
                |------------|                                             
                                                                           




Hi All,
             I am facing an issue on one of the HP3000 machines I am
working
on , the following is my machine spec

       RELEASE: C.75.00 MPE/iX HP31900 C.45.05 USER VERSION: C.75.01

I seem to be getting an error (MPE SECURITY VIOLATION) when

I try to access the Image database across accounts when another user is
using the database (but in read mode).
The following is the actual error
       IMAGE RESULT AT %0000: CONDITION WORD = -1
       MPE SECURITY VIOLATION
       DBOPEN, MODE 5, ON ABDBX
       PROGRAM = TSTUTM.RAJPRG.DSI2
       SUBROUTINE = UTOPENDBX
       LOCATION = DB OPEN

I am running a program (program is run from account1) which extracts data
from [dbase1.account1] and populates [dbase2.account2].Google gave me a
lead in the following link

              http://docs.hp.com/cgi-bin/doc3k/BB171690020.12039/26

Though it is for  "Information Access Server: Database Administration",
there is
one section that talks about security issues ..


***********************************************************
*************
     Security Issues.

     Files can be protected by security measures that limit file access
across
     accounts.  If this is the case, you can allow PC users to access data
as
     follows:

   *   Have users log into the group and account where the files of
       interest reside.

   *   Allow selected MPE users read access to the files by using the
       :ALTGROUP and/or :ALTACCT commands.

   *   Release the files with the :RELEASE command.

   *   Configure the file as a formal file designator, and have the users
       set up file equations to direct the file to the actual file.

***********************************************************
***************
I would be very greatful if you can help me resolve this mystry, the
following
are my thoughts


1. Does MPE restrict access to database files accross accounts
when "security " is turned on for a file
2. what exactly does the "security" feature for an MPE file actually mean ?
3. I get the MPE security violation error only when two users (one in
account1
and another in account2) are trying to access the database in account1.

user1 = opening database in mode1
user2 = opening database in mode5


Request you to kindly assist me in finding out the cause.

Thanks in advance.

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *




***IMPORTANT NOTICE: This communication, including any attachment, contains information that may be confidential or privileged, and is intended solely for the entity or individual to whom it is addressed.  If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message is strictly prohibited.  Nothing in this email, including any attachment, is intended to be a legally binding signature.***

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2