Security

Showing 74 of 13378

Db2 should allow binding its port 50000 on windows to localhost only.

Db2 currently doesn't allow binding its port 50000 on windows to localhost only, this port is left as open port and can be connected from other machines, unauthorized users can exploit this information to test vulnerabilities in the open service a...

over 2 years ago in Db2 / Security 2 Future consideration

3 VOTE

SSL support for two phase commit

We have seen errors hitting db2diag after enabling SSL and disabling the TCPIP port. These are related to DB2 not being able to handle Two Phase commit using just SSL port. Due to the new security mandate, the client requires all database connecti...

almost 3 years ago in Db2 / Security 0 Not under consideration

3 VOTE

Add a way to pre-encrypt db2 user password before adding it in response file to do db2 silent install.

We are OEM customer to provider our user Db2+Cognos installation, we're using db2 silent install with a response file, for now, there is no way (no tools, no command) to encrypt a plain db2 user password so that we can add this encrypted password ...

almost 3 years ago in Db2 / Installation & Upgrade / Security 0 Not under consideration

6 VOTE

Marking range partitions in a table as readonly

Need feature at range-partition level granularity to mark it read-only so that no update/insert/delete can be performed on a particular range-partition. And by default (when not marked as readonly) all partitions carries table level permissions.Pe...

about 6 years ago in Db2 / Security 0 Not under consideration

5 VOTE

Tool to check SSL certificate connectivity with KEYSECURE

Need some way to check if provided SSL certificate for secured connection to KEYSECURE is indeed valid before putting it in kmip cfg. This reduces the risk of any issues with SSL certificate on actual implementation day on production system.

about 5 years ago in Db2 / Security 0 Not under consideration

4 VOTE

Oracel "select any table" feature in DB2

Customer need a read only user to do the extract in the data warehouse project or to do the monitor. With the 'select any table' privilege ï¼Œ after customer create some new table,that user only have the read only privilege on those new tables.

over 4 years ago in Db2 / Security 1 Functionality already exists

7 VOTE

Add a new security role to read the logs

Add a new security privileges to allow and restrict the log reads and history file.

almost 8 years ago in Db2 / Security 0 Not under consideration

2 VOTE

DB2 RCAC Masking usage enhancement

This is urgent request to enhance RCAC masking rule. We are using it on several systems but due to below limitation or bug we have to use static hardcoded values in the masking rule, which is lot of manual process and impose security risk. This fe...

over 2 years ago in Db2 / Security 0 Not under consideration

3 VOTE

Single source for User access details

The SYSIBMADM.PRIVILEGES view should be enhanced to include all privileges that a user has on the database. currently it reports most of them but does not include data about a user's access on Columns & SurrogateIDs . i.e from syscat.colauth &...

about 4 years ago in Db2 / Security 1 Not under consideration

4 VOTE

DDL creation support thru implicit trusted connection

Trusted context is a very good security mecanism to promote a user from an application server to a specific role. We face 2 problems:- DDL issued from Siebel application server, when applying a change, fails for CREATE TABLE- If user has no direct...

almost 6 years ago in Db2 / Security 0 Not under consideration

Please enter your email address

FILTER BY CATEGORY