RE: Sign on control for users on different locations.

here's a quickie

   PGM
   DCL        VAR(&RTN) TYPE(*CHAR) LEN(900)
   DCL        VAR(&DEVD) TYPE(*CHAR) LEN(10)
   RTVJOBA    JOB(&DEVD)
   CALL       PGM(QSYS/QDCRDEVD) PARM(&RTN X'0384' +
                'DEVD0600' &DEVD X'00000000')
   SNDPGMMSG  MSG('I have determined your TCP/IP Address +
                to be ' || %SST(&RTN 878 15))
   ENDPGM


-------------------------
 Bryan Dietz
3X Corporation
614-410-9205







"Scott Lemmen" <slemmen@safestone.com>
Sent by: security400-admin@midrange.com
07/19/2002 01:21 PM
Please respond to security400


        To:     <security400@midrange.com>
        cc:
        Subject:        RE: [Security400] Sign on control for users on 
different locations.


Pardon my ignorance.   How do you go about capturing the user's IP
address?

Thanks....

Scott Lemmen
SafeStone Technologies Inc.
661.251.9556

-----Original Message-----
From: security400-admin@midrange.com
[mailto:security400-admin@midrange.com]On Behalf Of bdietz@3x.com
Sent: Friday, July 19, 2002 9:51 AM
To: security400@midrange.com
Subject: Re: [Security400] Sign on control for users on different
locations.


I did something similar,  The users connected to the system via a PC.  I
captured the IP address in the initial program and compared it to a list
of users already signed on.  If the user was signed on with IP address
1.2.3.4 the could not start another session unless it had the same IP
address.
This allowed as many session as they wanted, but only from the same PC.


-------------------------
 Bryan Dietz
3X Corporation
614-410-9205







Nilda Mejias <nmejias@collectcorp.com>
Sent by: security400-admin@midrange.com
07/19/2002 12:37 PM
Please respond to security400


        To:     "'Security400@midrange.com'" <Security400@midrange.com>
        cc:
        Subject:        [Security400] Sign on control for users on
different
locations.


Hell all,

I have been asked for my boss to find the way to control that a same user
cannot sing on to the system at the same time from two or more different
locations.

I found that the user profile can be set up to only allow one session
(Limit
device sessions parameter), but we don't want that. We want to control
that
if an user if already signed on to the system not be allow to sign on from
home or from a different office. Addition to that we want to print the a
list of users that during the day signed on to the system from different
locations.

If this possible? Does somebody has an idea how to implement this?. Can we
implement this control using the AS400 security tools or do we have to get
a
security software that has this feature?

Any help will be appreciated.

Thanks in advance.

Nilda Mejias
Systems Development
Collectcorp Inc.
Email:NMejias@Collectcorp.com
Tel.: (416) 935-2889.

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.




_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/2002

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/2002

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.