home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.os.vms
- Path: sparky!uunet!cis.ohio-state.edu!magnus.acs.ohio-state.edu!usenet.ins.cwru.edu!eagle!ariel.lerc.nasa.gov!uugblum
- From: uugblum@ariel.lerc.nasa.gov (VMScluster Administrator)
- Subject: Re: dsnlink
- Message-ID: <15SEP199213274494@ariel.lerc.nasa.gov>
- News-Software: VAX/VMS VNEWS 1.41
- Sender: news@eagle.lerc.nasa.gov
- Nntp-Posting-Host: ariel.lerc.nasa.gov
- Organization: NASA Lewis Research Center
- References: <01GOS07J5OSI0000B2@VAXF.COLORADO.EDU>
- Date: 15 Sep 1992 13:27 EST
- Lines: 50
-
- In article <01GOS07J5OSI0000B2@VAXF.COLORADO.EDU>, DWING@UH01.Colorado.EDU (Dan Wing) writes...
- >Eva Brown <brown@CAER.UKY.EDU>, wrote:
- >
- >>Is there anyone one using DSNLINK?
- [stuff deleted]
- >>Any disadvantages or problems?
- >
- [more stuff deleted]
- >I'd recommend using the ACL security discussed in the DSNlink manual so that
- >only 'authorized' individuals can send Email messages to the CSC requesting
- >help (this is for the same reason you don't give DEC's 1-800 number and
- >your access code to all your users). You may want to also restrict access to
- >the ITS and/or VTX portions of DSNlink to appropriate individuals.
- >
- >-Dan Wing, DWING@UH01.Colorado.EDU or WING_D@UCOLMCC.BITNET (DGW11)
- > Systems Programmer, University Hospital, Denver
-
- In sequence number C910624-1638, I asked DEC CSC about DSNlink usage
- restrictions. The response was that only authorized people on the software
- contract could request software patches and submit problems. There were no
- restrictions on the use of DSN ITS. I thought this was great because users
- could obtain programming examples directly from DSN ITS which would free up
- some of my time.
-
- The installation guide suggests changing the file protection, but it doesn't
- tell you what you should do. I asked DEC CSC to improve their documentation.
- After some experimentation, I found the following protection changes to be
- acceptable.
-
- $! Disable access to VTX. Users don't need access to patches.
- $ Set File /Prot=W SYS$SYSTEM:DSN$VTXPAD.EXE
- $!
- $! Don't let users change the registered phone number.
- $ Set File /Prot=W SYS$LIBRARY:DSN$REGSHR.EXE
- $!
- $! Don't let users log problem calls with CSC (send mail)
- $ Set File /Prot=W SYS$LIBRARY:DSN_MAILSHR.EXE
- $!
- $! Allow incoming mail messages
- $ Set File /Acl=(Id=[DSN$SERVER], Access=R+E) SYS$LIBRARY:DSN_MAILSHR.EXE
-
- --------------------------------------------------------------------------------
- The opinions expressed are my own, and not that of my employer.
-
- Greg Blumers Sverdrup Technology, Inc.
- VAXcluster Administrator c/o NASA Lewis Research Center
- (216)433-6777 Mail Stop 142-2
- 21000 Brookpark Road
- uugblum@scivax.lerc.nasa.gov Cleveland, OH 44135
- --------------------------------------------------------------------------------
-