Re: BugTraq Exploit for OS/400

[rob@xxxxxxxxx]

We have a solution - it's just that implementation...
And our security officer is vacation in Hawaii.  She calls in just long
enough to ask how our weather is :-)

Rob Berendt
--
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
Benjamin Franklin



                    Chuck Lewis
                    <clewis@iquest.net>       To:     midrange-l@midrange.com
                    Sent by:                  cc:
                    midrange-l-admin@mi       Fax to:
                    drange.com                Subject:     Re: BugTraq Exploit 
for OS/400


                    02/26/2002 01:32 PM
                    Please respond to
                    midrange-l






Rob wrote:

<We're cool.>

Especially with our change in weather ! :-)

<Also, until we get a current mess straightened up, we have multiple
signon's.  So there may
be a one-to-many relationship from employee number to user id's.  I am sure
there are other
shops out there like this.  1 signon for payroll from vendor XYZ.  1 signon
for ERP from
vendor ABC... that sort of rot.>

Is there NO way around that ? At my previous employer, we were running
SSA's BPCS and S2K's
G/L stuff and I had managed to get users into where they needed to be
"under the covers" (and
securely) with one signon...

Chuck

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.