RE: RE: Tying in biometric scanning to 5250 sign on

I see you are right again.  It's the application that performs the 5250
data stream manipulation.  Now how can I use SSO with a twinax terminal!
;-) But is there a 5250 terminal that supports biometrics?  Ok we are
moving away from them so I really don't need any.  Also we have removed
90% of our twinax and have been using Ethernet thin clients with 5250
emulation.  Now those could be updated to support biometrics and SSO I
suppose.


Christopher Bipes
Information Services Director
CrossCheck, Inc.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
qsrvbas@xxxxxxxxxxxx
Sent: Tuesday, February 28, 2006 5:55 PM
To: midrange-l@xxxxxxxxxxxx
Subject: RE: RE: Tying in biometric scanning to 5250 sign on

Chris:

5250 can be run in a compliant way. 5250 itself need not be compliant;
only the usage needs to be compliant for SSO.

For example, if your interactive subsystem(s) throw up a signon panel
that has no input fields but only text saying that entry without prior
verification is forbidden, the Kerberos/SSO solution becomes more easily
enforced. Or TN5250e with encrypted password perhaps. Or however you
choose to configure things.

(You could have a secondary interactive subsystem that could be used
when needed and that allowed terminal signon panels.)

In short, _you_ choose whether or not a given technique is used. SSO can
work fine with 5250.