Expand Configuration and Management Manual (H06.21+, J06.10+)

Managing the Network
Expand Configuration and Management Manual — 529522-013
18 - 10
Remote TACL Processes
Remote TACL Processes
Openers of a file are either local or remote with respect to the file. A local user is
logged onto the node on which the file resides. A remote user is logged on to a
different node in the same network.
A remote accessor of a node can become a local accessor by running a T
ACL process
in the remote node and logging on. For example, if remote passwords are established
so that user ADMIN.BILL at \WEST can access node \EAST, ADMIN.BILL can issue
this commands:
1> \east.tacl
TACL 1> logon admin.bill
Password:
ADMIN.BILL is now logged on as the local ADMIN.BILL on node \EAST
. Therefore,
ADMIN.BILL can access disk files on \EAST owned by ADMIN.BILL even if they are
secured “OOOO” (local owner only) along with other files that are only accessible
locally.
A remote user can be prevented from becoming a local user if the local super ID
specifies “A” (any local user) as the execute security for the TACL program file. This
prevents anyone on a remote node from starting a TACL process on the local node.
Also, a user who has the same user name as a user in another node cannot log on to
that node without knowing the local password for that user name. For example,
ADMIN.BILL on node \WEST cannot log onto node \EAST if ADMIN.BILL at \EAST has
a local password that is unknown to ADMIN.BILL at \WEST.
Global Remote Passwords
In some networks, it is not desirable for all users to have access to all nodes. However,
it is desirable to allow network access for certain users without forcing them to enter or
even know all the required REMOTEPASSWORD commands. In this case, a global
remote password can be established for these users.
At each node, a user named NET
.ACCESS is established and these commands are
issued:
LOGON NET.ACCESS
PASSWORD local-password
REMOTEPASSWORD \WEST, global-password
REMOTEPASSWORD \EAST, global-password
REMOTEPASSWORD \NYNY, global-password
.
.
.
REMOTEPASSWORD \system-n, global-password
The REMOTEPASSWORD command is used for each node on the network. The
global remote p
assword is the same for all nodes and is known only to the system