RE: Diabling Telnet Attention key -- MIDRANGE-L

Just to help clarify this....:-)

What I'm doing is issuing the Telnet command from within a CL program
(called by another application program).  The user is telnetted (is that
a word?) to the remote system and they are automatically logged on.
There's a lot of other things going on as well that keeps the user from
seeing a command line (among other things) on the remote system.
Also..the user does not have command line access on their home system
either.  

The problem is that when the user presses the Attention Key on the
telnet session (one as/400 to another as/400 remember...) they see that
Attention Control menu, which, among other things, gives them a command
line on their home system.  And it is this last which is unnacceptable
as it opens a hole in what is otherwise part of a relatively good
security practice. 

So...the long and the short of it is that I care less about the fact
that that particular menu is there and more about the fact that that
menu contains a command line.  It is this that I want to somehow avoid
presenting to the user, and that's what I was trying to do by avoiding
showing that telnet menu altogether.

It's times like these that I really miss the early days of my career
when the biggest technical problem I faced was how to build a subfile...



Shannon O'Donnell





-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
Sent: Thursday, February 12, 2004 5:27 PM
To: Midrange Systems Technical Discussion
Subject: Re: Diabling Telnet Attention key




On Thu, 12 Feb 2004, James H H Lampert wrote:
>
> But it ISN'T the AS/400 Telnet SERVER that processes the ATTN key; 
> it's the AS/400 Telnet CLIENT that brings up that *PNLGRP! You hit 
> ATTN on any other TN5250 client (such as the one I designed for our 
> ThinView and Wintouch products), and it brings up the Operational 
> Assistant. Or whatever the user has set. (Or nothing at all, if *NONE 
> is set).

I guess I was under the impression that he was telnetting from a PC to
an iSeries, then telnetting from that iSeries to something else.

If that's the case, you can block the ATTN key (actually, it's probably
an AID sequence) from getting from the original PC to the iSeries using
a proxy.

As I said, if the telnet server never receives the ATTN key, it can't
bring up the panel.  I hope this explanation was a bit clearer.  Since
there are two telnet sessions going on, it's easy to get lost.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.