HP 3000 Manuals

HP Security Monitor/iX User's Guide

Dealing with Embedded Passwords in Remote Logons 

Many applications and subsystems use embedded passwords within remote
logon commands.  An example is the case of accessing a database residing
on another system.

When your system receives such logon attempts, it treats them as if they
had been issued interactively.  For example, if your system is set up to
require password prompts, applications or subsystems will fail if they
issue remote logon commands that contain embedded passwords.

To minimize or eliminate the problem, the HP Security Monitor allows
remote logons to be exempt from the password prompt requirement.  After
the system is set to require password prompts, the HP Security Monitor
allows the option of exempting remote logons.

Rather than exempting remote logons, users may be asked to alter jobs
that contain embedded passwords so they comply with the second example,
below.  The first example illustrates a job with a password embedded in
the REMOTE HELLO command line.  The second example illustrates a job with
a password on the following line, anticipating the prompt.

"Example 1".

      !JOB USER.ACCT
      !DSLINE X
      !REMOTE HELLO USERX/PASSWORD.ACCT
      !COMMENT

"Example 2".

      !JOB USER.ACCT
      !DSLINE X
      !REMOTE HELLO USERX.ACCT
      PASSWORD
      !COMMENT

The first example will be rejected if embedded passwords and exempting
REMOTE HELLO are not allowed.  The second example is acceptable whether
or not embedded passwords are allowed.


NOTE  Embedded passwords in remote sessions are not recommended.

MPE/iX 5.0 Documentation