Managing Users and Security
Guardian User’s Guide — 425266-001
16 -20
Accessing a File on a Remote System
The user at system \EAST entered the matching password and now has remote access to
system \WEST as ADMIN.BILL.
ADMIN.BILL, logged on at system \EAST, does not have the same status at \WEST as
does the ADMIN.BILL at \WEST. Because ADMIN.BILL at \EAST is a remote
accessor of \WEST, this user cannot access disk files on \WEST that are secured for
local access only.
Also, if ADMIN.BILL on \EAST creates a process on \WEST that attempts to access the
home terminal on \EAST, the attempt will fail because remote passwords to allow
access from \WEST to \EAST were not established.
For ADMIN.BILL to gain access to \EAST from \WEST, an allow-access password
must be defined for ADMIN.BILL at \EAST, matched by a request-access password at
\WEST. For example, this is entered first at \EAST and then at \WEST:
Now users logged on as ADMIN.BILL at either system \WEST or system \EAST have
access to both systems.
Considerations for Remote Passwords
•
When matching remote passwords are established on both systems, a user does not
need to specify the remote password to gain access to the remote system.
Furthermore, the super IDs at the various nodes in a network can set up the
appropriate allow-access and request-access passwords for all users so that the users
themselves need not be concerned with REMOTEPASSWORD commands. When
the appropriate passwords are established for a user, the user can access files
remotely without being aware of the network passwords.
•
The absence of an allow-access password prevents remote access by anyone acting
as that user. Thus, if MARKETNG.SUE does not supply an allow-access password,
no remote user with the same user ID can access MARKETNG.SUE’s home system
as MARKETNG.SUE.
•
A remote password, once defined, remains in effect until modified by a subsequent
REMOTEPASSWORD command. To remove the remote password for the system
\EAST:
To remove all of the user’s remote passwords:
•
Request-access passwords and allow-access passwords can be specified at any time.
Remote access is permitted as soon as both remote passwords are defined (provided
they match).
10> LOGON ADMIN.BILL
11> REMOTEPASSWORD \EAST, AARDVARK
10> REMOTEPASSWORD \EAST
10> REMOTEPASSWORD
Содержание Guardian
Страница 24: ...About This Guide Guardian User s Guide 425266 001 xxii Your Comments Invited ...
Страница 30: ...Part I Using the Compaq Tandem Advanced Command Language TACL Guardian User s Guide 425266 001 ...
Страница 100: ...Part II Managing Files Using the File Utility Program FUP Guardian User s Guide 425266 001 ...
Страница 146: ...Part III Managing Disk and Tape Processes Guardian User s Guide 425266 001 ...
Страница 232: ...Backing Up and Restoring Disk Information Guardian User s Guide 425266 001 11 26 Backcopy Examples ...
Страница 234: ...Part IV Using the Spooler and Its Utilities Guardian User s Guide 425266 001 ...
Страница 248: ...Introduction to the Spooler Guardian User s Guide 425266 001 12 14 Sending Output to a SPOOL DEFINE ...
Страница 300: ...Performing Routine Spooler Operations Using Spoolcom Guardian User s Guide 425266 001 14 38 Problem Solving Summary ...
Страница 322: ...Part V Security Features and Other Guardian Utilities Guardian User s Guide 425266 001 ...
Страница 368: ...Monitoring Event Messages Guardian User s Guide 425266 001 17 14 Using the Event Viewer ...
Страница 378: ...Displaying Version and System Information Guardian User s Guide 425266 001 18 10 Task 2 Interpret SYSINFO Output ...
Страница 410: ...Monitoring Hardware Components Guardian User s Guide 425266 001 19 32 Automating System Monitoring ...
Страница 460: ...Index Guardian User s Guide 425266 001 Index 24 Special Characters ...