Re: Replacing the AS400 signon manager?

Actually yes.

For example, on the FTP server logon request point, you could have it do
this because you'll know several things.
- IP Address of the request.
- whether to allow the signon
- and if you do allow the signon, do you want to switch the userid to
something else, (how else would you be able to support 'anonymous'?)
Your exit point could take the IP address and activate the nearest retinal
scanner.  Granted, your 'secure' people would probably not be able to use
DHCP.

We're iSeries folks.  We can do anything, given enough time and money.

I am sure the exit point for several others can do the same.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com


|-----------------------------+-------------------------------------------|
|   jared                     |                                           |
|   <jhunter@xxxxxxxxxxxx>    |                                           |
|   Sent by:                  |                                         To|
|   midrange-l-bounces@midrang|                                      Midra|
|   e.com                     |                                      nge  |
|                             |                                      Syste|
|   08/05/2004 02:24 PM       |                                      ms   |
|                             |                                      Techn|
|         Please respond to   |                                      ical |
|         Midrange Systems    |                                      Discu|
|       Technical Discussion  |                                      ssion|
|      <midrange-l@xxxxxxxxxxx|                                      <midr|
|                m>           |                                      ange-|
|                             |                                      l@mid|
|                             |                                      range|
|                             |                                      .com>|
|                             |                                         cc|
|                             |                                           |
|                             |                                    Subject|
|                             |                                      Re:  |
|                             |                                      Repla|
|                             |                                      cing |
|                             |                                      the  |
|                             |                                      AS400|
|                             |                                      signo|
|                             |                                      n    |
|                             |                                      manag|
|                             |                                      er?  |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|                             |                                           |
|-----------------------------+-------------------------------------------|






> Others have responded more clearly than me.
>
> What "very strong authentication" may mean can differ from one to
> another.  For example, how would one stop and prompt for a retinal scan
> during the middle of a ftp session, versus during the middle of a 5250
> signon?

That's actually a lot closer to what I'm asking.  How can I start an
out-of-band authentication protocol with the client host (based on retinal
scans, or cryptographic certificates, or midi keyboards, whatever) and use
the result of that conversation to either allow or disallow signon?

And maybe I want to let the connection proceed, but under a different user
profile...is that possible?

-Jared


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.