How to disallow a database from being shutdown remotely? - Progress Community

Loading

Skip to Main Content

How to disallow a database from being shutdown remotely?

A Progress database can be shutdown from a remote server provided the user issuing the shutdown has permissions to do so and access to the server that the remote database is running on. For security reasons, this is not always the desired behaviour. Progress 9.1E01 introduces a new database startup parameter "normtshutdown" in order to prevent this.

Jul 26, 2017
Knowledge

Title

How to disallow a database from being shutdown remotely?

URL Name

P94213

Article Number

000145851

Environment

Product: Progress Version: 9.1E01 and later Product: OpenEdge Version: 10.0B02, 10.1x, 11.x OS: All supported platforms

Question/Problem Description

How to disallow a database from being shutdown remotely?
What is the normtshutdown parameter used for?
How to prevent a remote user from shutting down the database ?

Steps to Reproduce

Clarifying Information

Startup parameter to disallow remote database shutdown requests.

Error Message

Shutdown request denied because you are an invalid user, remote shutdown is not allowed, or the database is enabled for Failover Clusters, (12566) Shutdown request denied; you do not have the correct user ID. (547)

Defect Number

Enhancement OE00109196

Enhancement Number

Cause

Resolution

The ability to shut a Progress database down remotely has been in our Product since Progress Version 7. Prior to Progress Service Pack 9.1E01 it is not possible to prevent a remote user from shutting down a Progress database. If the port is open (the database has been started with -S parameter), then if a user with permissions to shutdown a Progress OpenEdge database has access to the remote machine and is "smart enough" to know the port and hostname that the database is started under, they will be able to shut the database down remotely. In essence, if a user has access and knows what to do, they can.

$ proshut -db dbname -H hostname -S port [-Mm] -by

Progress Service Pack 9.1E01 introduces a new startup parameter that flags the database broker to disallow remote database shutdown requests.

The database startup parameter is: no remote shutdown (-normtshutdown). Database startup scripts that do not include this parameter will continue to function as originally intended.

Example:

The database is started restricting remote shutdown:

$ proserve dbname -S <portnumber> [-Mm <value>] -normtshutdown

A remote shutdown request is denied:

$ proshut dbname -H <hostname> -S <portnumber> [-Mm <value>] -by
Shutdown request denied because you are an invalid user, remote shutdown is not allowed, or the database is enabled for Failover Clusters, (12566)

If a remote shutdown request is made from an earlier Progress version, the shutdown request is denied but a different error message is displayed:

Shutdown request denied; you do not have the correct user ID. (547)

For further information refer to Article How to shut down a database remotely

These changes do not disallow remote shutdown by the AdminServer, that is, using a local AdminServer with Progress Explorer or OpenEdge Explorer running remotely or issuing DBMAN from a remote command-line session.

The code used to disallow remote shutdowns when the argument is specified, is also used to disallow remote shutdowns for cluster-enabled databases at all times. Refer to Article Unable to remotely shutdown or disconnect users from cluster-enabled database - error 12566

Workaround

Notes

Progress Article:

How to disconnect a database user with PROSHUT or PROMON

Keyword Phrase

Last Modified Date

11/20/2020 7:14 AM

Disclaimer

The origins of the information on this site may be internal or external to Progress Software Corporation (“Progress”). Progress Software Corporation makes all reasonable efforts to verify this information. However, the information provided is for your information only. Progress Software Corporation makes no explicit or implied claims to the validity of this information.

Any sample code provided on this site is not supported under any Progress support program or service. The sample code is provided on an "AS IS" basis. Progress makes no warranties, express or implied, and disclaims all implied warranties including, without limitation, the implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample code is borne by the user. In no event shall Progress, its employees, or anyone else involved in the creation, production, or delivery of the code be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample code, even if Progress has been advised of the possibility of such damages.

Loading

How to disallow a database from being shutdown remotely? - Progress Community