Re: Remote Sign On Screen SECURITY CONSIDERATION

["Steve Glanstein" <mic@xxxxxxxxx>]

Hi folks:

Just received this from you...hope I'm not too off topic.

If you use SECURELOC(*YES) or SECURELOC(*VFYENCPWD) : Recommend you
implement a location password into QAPPNRMT or the *DEVD (if APPN=*NO). This
will prevent others from re-creating the communications environment without
the password. It also helps to validate that the computer at tyhe other end
of the pipe is the authorized one. If you forget the password, another one
can always be re-assigned.

hope this helps...

Steve Glanstein
mic@aloha.com


>Date: Wed, 19 Jul 2000 18:22:00 -0400
>From: "Todd kidwell" <Todd.kidwell@3cc.co.wayne.mi.us>
>Subject: Re: Remote Sign On Screen
>Kevin,
>It's been a while, but I believe this can be accomplished
>by specifying *YES for Secure Loc on the remote
> configuration list.
> From 720:
>  WRKCFGL
>  If QAPPNRMT exists, type 2
>    If entry for 620 exists, change Secure Loc from *NO (default) to *YES
>    If no entry for 620, add entry - be sure to specify *YES for Secure Loc
>  If no QAPPNRMT, CRTCGL  TYPE(*APPNRMT)
>    Add entry for 620 - be sure to specify *YES for Secure Loc

>The profile and password on both systems has to match.
>Also, be sure to specify RMTUSER(*CURRENT)  RMTPWD(*CURRENT)
> on the STRPASTHR screen.
> Another way to accomplish this (not recommended,
> but possible), is to store the profile and password
> in a file or data area, then use a CL to retrieve the
> [snip snip]
>Todd Kidwell (Netstar)
>AS/400 System Administrator
>(313) 224-0578

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---