The ability to shut a Progress database down remotely has been in our Product since Progress Version 7. Prior to Progress Service Pack 9.1E01 it is not possible to prevent a remote user from shutting down a Progress database. If the port is open (the database has been started with -S parameter), then if a user with permissions to shutdown a Progress OpenEdge database has access to the remote machine and is "smart enough" to know the port and hostname that the database is started under, they will be able to shut the database down remotely. In essence, if a user has access and knows what to do, they can.
$ proshut -db dbname -H hostname -S port [-Mm] -by
Progress Service Pack 9.1E01 introduces a new startup parameter that flags the database broker to disallow remote database shutdown requests.
The database startup parameter is:
no remote shutdown (-normtshutdown). Database startup scripts that do not include this parameter will continue to function as originally intended.
Example:
The database is started restricting remote shutdown:
$ proserve dbname -S <portnumber> [-Mm <value>] -normtshutdown
A remote shutdown request is denied:
$ proshut dbname -H <hostname> -S <portnumber> [-Mm <value>] -by
Shutdown request denied because you are an invalid user, remote shutdown is not allowed, or the database is enabled for Failover Clusters, (12566)
If a remote shutdown request is made from an earlier Progress version, the shutdown request is denied but a different error message is displayed:
Shutdown request denied; you do not have the correct user ID. (547)
These changes do not disallow remote shutdown by the AdminServer, that is, using a local AdminServer with Progress Explorer or OpenEdge Explorer running remotely or issuing DBMAN from a remote command-line session.
The
code used to disallow remote shutdowns when the argument is specified, is also used to disallow remote shutdowns for cluster-enabled databases at all times. Refer to Article
Unable to remotely shutdown or disconnect users from cluster-enabled database - error 12566