HPlogo HP Security Monitor/iX User's Guide: HP 3000 MPE/iX Computer Systems > Chapter 2 Accessing the System

Dealing with Embedded Passwords in Remote Logons

» 

Technical documentation

Complete book in PDF
» Feedback

 » Table of Contents

 » Index

Many applications and subsystems use embedded passwords within remote logon commands. An example is the case of accessing a database residing on another system.

When your system receives such logon attempts, it treats them as if they had been issued interactively. For example, if your system is set up to require password prompts, applications or subsystems will fail if they issue remote logon commands that contain embedded passwords.

To minimize or eliminate the problem, the HP Security Monitor allows remote logons to be exempt from the password prompt requirement. After the system is set to require password prompts, the HP Security Monitor allows the option of exempting remote logons.

Rather than exempting remote logons, users may be asked to alter jobs that contain embedded passwords so they comply with the second example, below. The first example illustrates a job with a password embedded in the REMOTE HELLO command line. The second example illustrates a job with a password on the following line, anticipating the prompt.

"Example 1".

   !JOB USER.ACCT 

   !DSLINE X 

   !REMOTE HELLO USERX/PASSWORD.ACCT 

   !COMMENT 

"Example 2".

   !JOB USER.ACCT 

   !DSLINE X 

   !REMOTE HELLO USERX.ACCT 

   PASSWORD 

   !COMMENT 

The first example will be rejected if embedded passwords and exempting REMOTE HELLO are not allowed. The second example is acceptable whether or not embedded passwords are allowed.

NOTE: Embedded passwords in remote sessions are not recommended.
Feedback to webmaster