Expand Configuration and Management Manual (H06.21+, J06.10+)

Managing the Network
Expand Configuration and Management Manual — 529522-013
18 - 8
Establishing Remote Passwords
GROUP . USER I.D. # SECURITY DEFAULT VOLUMEID
ADMIN .BILL 6,14 NONO $PUBS.BILL
Establishing Remote Passwords
After user IDs for network users are added to relevant nodes on the network, remote
passwords must be established for each remote node. Remote passwords are
specified with the TACL REMOTEPASSWORD command or the RPASSWRD program.
For example, ADMIN.BILL (user ID 6,14) was added at nodes \WEST and \EAST. At
node \WEST, these commands are entered to establish an allow-access remote
password to node \WEST:
logon admin.bill
remotepassword \west, shazam
The allow-access password for ADMIN.BILL for \WEST from all other nodes is
SHAZAM.
At node \EAST, these commands are entered:
logon admin.bill
remotepassword \west, shazam
The user at node \EAST entered the matching password and now has remote access
to node \WEST as ADMIN.BILL.
ADMIN.BILL, logged on at node \EAST, does not have the same status at \WEST as
does the ADMIN.BILL at \WEST. Because ADMIN.BILL at \EAST is a remote accessor
of \WEST, he cannot access disk files on \WEST that are secured for local access only.
Also, if ADMIN.BILL on \EAST creates a process on \WEST that tries to access the
home terminal on \EAST, the attempt will fail because remote passwords to allow
access from \WEST to \EAST have not been established.
For ADMIN.BILL to gain access to \EAS
T from \WEST, an allow-access password
must be defined for ADMIN.BILL at \EAST, matched by a request-access password at
\WEST. For example, this is entered first at \EAST and then at \WEST:
logon admin.bill
remotepassWOrd \east, aardvark
Now users logged on as ADMIN.BILL at either node \WEST or \EAST have access to
both nodes.
Remote Password Considerations
These considerations apply to remote passwords:
•
When matching remote passwords are established at both nodes, a user does not
need to specify the remote password to gain access to the remote node.
Furthermore, the super IDs at the various nodes in a network can set up the
appropriate allow-access and request-access passwords for all users so that the
users themselves need not be concerned with REMOTEPASSWORD commands.