Re: script to change Client Access .ws profiles

In your situation, how does adding the Bypass Signon flag "remove a security prob"?

It's more for bypassing the green screen telnet signon that passes the pwd in clear text.
(or have they fixed this? this site running an old CA Express).
jim

----- Original Message ----- From: "Steve Martinson" <smartfamily2003@xxxxxxxxx>
To: "midrange forum" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, August 14, 2007 12:42 AM
Subject: RE: script to change Client Access .ws profiles

Appreciate the info. We are needing to update certains paramaters (like system name), hopefully add the Bypass > Signon flag (to remove a security prob)...

Sorry for the late reply. I work at client sites all day... In your situation, how does adding the Bypass Signon flag "remove a security prob"? Wouldn't you be introducing additional risk by allowing the double-clicking of the CA icon to take the 'clicker' straight to the initial menu/program of the already authenticated user (regardless of who actually does the double-clicking)? Your desire to do this implies that you have strong workstation/desktop security controls that would mitigate this risk.

Best regards,

Steven W. Martinson, CISSP, CISM (passed the CISA on 06/09/07)
Sheshunoff Management Services, LP.
Senior Consultant - Technology & Risk Management
2801 Via Fortuna, Suite 600 | Austin, TX 78746
Direct: 281.758.2429 | Mobile: 512.779.2630
e.Mail: smartinson@xxxxxxxxx



____________________________________________________________________________________Ready for the edge of your seat?
Check out tonight's top picks on Yahoo! TV.
http://tv.yahoo.com/
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.