home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
kermit.columbia.edu
/
kermit.columbia.edu.tar
/
kermit.columbia.edu
/
newsgroups
/
misc.20020314-20021006
/
000211_jjpatteeuw@peoplepc.com_Sat Jul 13 10:26:09 EDT 2002.msg
< prev
next >
Wrap
Text File
|
2002-10-06
|
2KB
|
66 lines
Article: 13519 of comp.protocols.kermit.misc
Path: newsmaster.cc.columbia.edu!newsfeed.nyu.edu!news.maxwell.syr.edu!newsfeed1.cidera.com!Cidera!cyclone.socal.rr.com!cyclone3.kc.rr.com!news3.kc.rr.com!twister.columbus.rr.com.POSTED!not-for-mail
Message-ID: <3D2F6572.A8B9D8BA@peoplepc.com>
From: Jack Patteeuw <jjpatteeuw@peoplepc.com>
X-Mailer: Mozilla 4.79 [en] (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.protocols.kermit.misc
Subject: Re: Security too tight on VMS
References: <3D2F4541.C3C282FC@ford.com> <agnh9i$m4o$1@watsol.cc.columbia.edu>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 44
Date: Fri, 12 Jul 2002 23:23:57 GMT
NNTP-Posting-Host: 24.208.250.56
X-Complaints-To: abuse@rr.com
X-Trace: twister.columbus.rr.com 1026516237 24.208.250.56 (Fri, 12 Jul 2002 19:23:57 EDT)
NNTP-Posting-Date: Fri, 12 Jul 2002 19:23:57 EDT
Organization: Road Runner High Speed Online -- Columbus
Xref: newsmaster.cc.columbia.edu comp.protocols.kermit.misc:13519
Frank da Cruz wrote:
>
> In article <3D2F4541.C3C282FC@ford.com>,
> Jack Patteeuw <jpatteeu@ford.com> wrote:
> : We have a captive account on VMS that runs C-Kermit 8.0.201.
> :
> : The login.com is as follows
> :
> : $ SET DEFAULT DEVICE:[DIRECTORY]
> : $ DEFINE/USER SYS$INPUT SYS$COMMAND
> : $ KERMIT "-H" "-E" "-q" "-x"
> : $ EXIT
> :
> : SYS$LOGIN:CKERMIT.INI contains the following
> :
> : enable get
> : ...
> : disable send
> :
> : Obviously the only thing we want the use to do is use the GET command !!
> :
> : The problem is, the user is receiving the error "insufficient privilege or
> : file protection violation". Deleting CKERMIT.INI eliminates this problem.
> :
> : Why ?
> :
> DISABLE and ENABLE are from the server's point of view, not the client's.
> You probably want DISABLE GET (don't let the server GET -- i.e. receive
> files) and ENABLE SEND (let it send files).
>
> - Frank
Seem plausible but now I get
Transfer canceled by sender.
Sender's message: "GET disabled"
One other hint. The file in DEVICE:[DIRECTORY} are not owned ny the user. The
user has access to them via an ACE that grants READ.
--
Jack Patteeuw