Re: Hidden password

["Steve Glanstein" <mic@xxxxxxxxx>]

I'm not clear about "saved in the clear".  Do you mean, "sent in the
clear"?

The specifications for FTP have the password sent in the clear.

If you want to hide it in a data file, data area, etc., there are few
perfect techniques for hiding it.  You can substantially "secure" it if
your security is set up properly on the AS/400.  HOWEVER:  People with
*SAVSYS can save it and potentially restore it on another computer where
they are QG_D.  This is one of the problems with the older FTP
architecture.

Also, anybody triggering this FTP to a different site can get the password
rather easily.

Steve Glanstein
mic@aloha.com

------------------------------

>Date: Wed, 01 Apr 98 19:06:00 -0500
>From: boothm@ibm.net
>Subject: re: Hidden password

>Is there a way to hide a data field from view?  Heres what I  want to do: 
>I want to FTP an AS/400 data file to an off-site server.  That server
>requires a unique log-in including a password.  I would like the process
>to run during the night, and I would like the log-in name and the password
>to be in the CL or available in a data file, or something similar.  But I
>don't want it saved in the clear; that seems just asking for later
>troubles.  Is it possible?

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---