IBM Power Ideas Portal
Hide about this portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Not under consideration
Workspace IBM i
Categories IBM i Access Family
Created by Guest
Created on Dec 26, 2016

RELATED IDEAS

RUNRMTCMD equivalent command for IBM i Access Client Solutions.

See this idea on ideas.ibm.com

RUNRMTCMD was available in IBM i Access for Windows (iAWin) but not in IBM i Access Client Solutions (i ACS). Up until Service Pack (SP) SI57907, when RUNRMTCMD is issued, the desktop application would launch and user is able to view the application. However, after applying SP SI60523 or SI62603, the process is running, but the interaction with the desktop stop - user no longer can view the application. We are suddenly forced to either use the Microsoft (Sysinternals) PSEXEC program or STRPCO and STRPCCMD, or refrain from apply the current SPs for iAWin, and i ACS does not offer the the RUNRMTCMD function.


Use Case:

RUNRMTCMD was available in IBM i Access for Windows (iAWin) but not in IBM i Access Client Solutions (i ACS). We have been heavily using RUNRMTCMD function in numerous applications and now have 1000s of areas where this needs to be changed. STRPCO and STRPCCMD is not an option for us, as we perform various processes under the cover for the end user. It will be a major undertaking to make these changes in all the processes - IFF we have access to the codes. We need this functionality and would request to have this ported over to iACS, so that we can transition over into iACS in the future from iAWin. We would also like to see a replacement that use the SSL connection.


Idea priority Medium
  • Guest
    Reply
    |     Aug 1, 2022

    Even STRPCCMD is not secure. You can basically invoke very powerful powershell or cmd scripts with such system, privilege escalation etc without any control.

    Basically it is assumed that a OS-400 user can invoke commands on the connecting terminal PC.

    Let's face it: it is not a good design.


    This should be mediated by the 5250 connecting terminal using explicit behaviour and semantics, i.e.:

    OPEN THIS LINK / OPEN THIS FILE etc.


    but allowing STRPCCMD to launch ANY OS command (cmd.exe , powershell.exe etc.) to the connecting PC? Well.... no.... it is just bad design and a security bomb waiting to happen....




  • Guest
    Reply
    |     Jan 16, 2017

    RUNRMTCMD is not a secure solution and will not be implemented. You are encouraged to use STRPCCMD or some other secure solution (eg SSH).

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.