Expand Configuration and Management Manual (H06.21+, J06.10+)

Managing the Network
Expand Configuration and Management Manual — 529522-013
18 - 9
Remote Process Security
When the appropriate passwords are established for a user, the user can access
files remotely without being aware of the network passwords.
•
The absence of an allow-access password prevents remote access by anyone
acting as that user. Thus, if MARKETING.SUE does not supply an allow-access
password, no remote user with the same user ID can access MARKETING.SUE’s
home system as MARKETING.SUE.
•
A remote password, after defined, remains in effect until modified by a subsequent
REMOTEPASSWORD command. This command removes the remote password
for the system \EAST:
remotepassword \east
This command removes all the user’s remote passwords:
remotepassword
•
Request-access passwords and allow-access passwords can be specified at any
time. Remote access is permitted as soon as both remote passwords are defined
(provided they match).
•
Remote passwords are independent of local passwords. In the preceding example,
ADMIN.BILL could prevent unauthorized persons from logging on as ADMIN.BILL
by entering this command with password LOCBILL at either system:
password locbill
Remote Process Security
These security considerations apply to remote processes:
•
With respect to a specific node, each process in the network is either local or
remote. A process is remote to a node if it has these characteristics:
•
The process is running on a remote node.
•
The process’ creator is on a remote node.
•
The process’ creator is node.
Therefore, a process that is running on a node can be remote with respect to that
node. These restrictions prevent a remote process from creating another process
to access a file whose security specifies local access only.
•
A remote process cannot suspend nor activate a local process. A remote process
cannot stop a local process, unless the stop mode of the local process is 0 (which
allows anyone to stop it).
•
A remote process cannot put a local process in a debug state.