HP HP-UX SNAplus2, Administration Manual, Page: 256 / 398

256 Chapter 11
Managing SNAplus2 Clients
Managing Win32 Clients
Win32 Client Security
SNAplus2 provides a facility for validating the user name and password
of any Win32 client running on Windows 95 and attempting to contact a
server running SNAplus2. This enables you to ensure that only
authorized Windows users are able to access the SNAplus2 system. On
Windows NT no validation is performed (the fact that the user had to
enter a password to access the desktop is considered to provide sufficient
security).
By default, Win32 client security is not active, so that any computer with
the Win32 client software installed can access SNAplus2 servers. To
enable Win32 client security, use the following procedure:
Step 1. Agree on a user name and password with each Win32 client user who is
authorized to access the SNAplus2 system.
Step 2. On all servers that this client can access, define this user name and
password to the HP-UX system as a system user name.
Step 3. After enabling the SNAplus2 software on a server, use the following
command:
snapwinsec domain
This command enables Win32 client security on all servers in the
SNAplus2 domain. You do not need to repeat the command when
enabling the SNAplus2 software on other servers.
When a Win32 client starts up and tries to access a server on which
Win32 client security is enabled, the client software displays a pop-up
message requesting a password. This password from the Registry is
checked against the user names defined to the HP-UX system on the
server. If the Win32 client user does not specify a password, or if the user
name and password cannot be matched with a user name and password
on the server, the server rejects the client's access attempt.
To stop using Win32 client security, so that any Win32 client user can
access SNAplus2 servers without having to specify a password, use the
following command:
snapwinsec off
This command removes Win32 client security on all servers in the
SNAplus2 domain. You do not need to repeat the command on other
servers.