Re: Login Issues at QPWDLVL 2 for some users

Gord,

Unless you're using encrypted telnet, the user id and password type
into the 5250 green screen sign on are sent in the clear; a network
sniffer can easily see them.

However, when using bypass-signon, the user id and passwords are
encrypted into the request to start the session even when the
resulting telnet session is unencrypted.

HTH,
Charles

On Wed, Nov 24, 2010 at 10:58 AM, Gord Hutchinson
<gordm1@xxxxxxxxxxxxxxx> wrote:

On Wed, 24 Nov 2010 09:48:04 -0500, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:

Good suggestion.  It should be noted that unless you're using
encrypted sessions, bypassing sign-on is actually more secure than
presenting the non-encrypted 5250 signon screen.

HTH,
Charles

I don't follow.  How is it more secure bypassing the second (green screen)
signon?  I do it out of convenience more than anything else (Who wants to
type the same userid/password twice?) but most users do the double sign in.


Gord

--
Gord Hutchinson
Database Administrator, IT
TST Overland Express
ghutchinson@xxxxxxxxxxxxxxx
905-212-6330
fax: 905-602-8895

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.