Re: Client Access bypass signon (Dan Bale)

["Jim Franz" <franz400@xxxxxxxxxxxx>]

for the same reason systems used to have a security level 10
and by default all users had *allobj auth.
The guts of CA from earlier products were from long before
most every connected the as400 to the internet.
your as400 "can" be extremely secure if you follow certain steps.
It is not if you use features like this (which IBM may have built
15 years ago, and they rarely remove features).

jim

----- Original Message ----- 
From: "Dan Bale" <dbale@xxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Friday, July 30, 2004 11:16 AM
Subject: RE: Client Access bypass signon (Dan Bale)


> > -----Original Message-----
> > From: midrange-l-bounces@xxxxxxxxxxxx / Jones, John (US)
> > Sent: Friday, July 30, 2004 11:00 AM
> >
> > Anyone who sniffs the LAN can pick up the contents of the batch file.
>
> Frankly, if we've got unauthorized folks sniffing our LAN, we've got far
> bigger problems than my AS/400 signon.  Can't a LAN sniffer capture
network
> logon passwords as well?
>
> I guess it bears reiterating the question that Steve asks, "If it is a
> security violation, why would IBM supply it?"
>
> I will discuss this with our sec admin.
>
> Thanks,
> db
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>