Client Access - Security Question

[Jeffrey Stevens <jssteven@xxxxxxxxxx>]

Brenda/Vernon,

You can also use the user exit interface for Telnet.  This lets
you control who is allowed to access your system, and can also
bypass the signon panel based on the IP address (or any other
factors you want).  Perhaps a not well understood feature of the
user exits is NO PASSWORD IS REQUIRED to do auto-signon (although
a user profile is required).  The user exit can set the user
profile to whatever it wants, accepting any client USER variable
value from client access or overridding the USER variable to any
desired low-level user profile.

With user exits, you don't have stored passwords laying around.
I've submitted some sample user exits to NEWS/400 magazine,
I think they plan to publish in their Sept issue. There are also
some downlevel samples at an IBM link (I don't own this link, but
it currently lists some early versions of my samples):

  http://www.as400.ibm.com/tstudio/tech_ref/tcp/TELEX/Indexfr.htm

>>Hi!  We are on an AS/400 running V3.2 and have been playing around
>>with Client Access (latest PTF has been applied) on our own machines
>>to check out security before giving it out to all of our users.  Is
>>it possible to eliminate the two sign-ons (the initial connection
>>signin window then the standard AS/400 signon screen) without
>>filling in the default user?  We don't want the system keeping the
>>passwords for any users.  Our need includes the use of the data
>>transfer feature as well.

>It will be possible when you get v3r1m3 of CA, as well as the supporting
>PTFs fot v3r2 of OS/400. In v3r1m3 of CA, it will be possible to specify in
>PC5250 that you want to bypass signon. This is just like it was in APPC
>connections. Then the only entry will be for the initial connection.

>At present, you can do this if you are running an APPC connection.

>I don't know if there's a way to do this with Graphical Access. Maybe with
>APPC, eventually with TCP/IP. Anybody know?

>HTH

>Vernon Hamberg
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---