RE: Replacing the AS400 signon manager?

["Kurt Goolsbee" <kurt.goolsbee@xxxxxxxxxxxxx>]

Jared,  

There are a bunch of exit points and each one usually supports more than one
function.  They are usually called right before the function is performed
and they have a return code parameter that will allow you to prevent the
function from executing.  Depending on the server, sometimes the OS has
already authenticated and authorized the user to a function but not always.
These subtleties are why I'd advise you to go buy a vendor package. 

Kurt



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of jared
Sent: Thursday, August 05, 2004 2:20 PM
To: Midrange Systems Technical Discussion
Subject: RE: Replacing the AS400 signon manager?

> You can not pre-empt the system supplied sign-on programs, for the IBM
> supplied attach points - you only get (mostly) the 'after the event'
> by utilising the defined exit points.

I guess I'm still not clear on when the exit programs actually get called,
and what power they can exert once they are called.  How 'after the event'
are they?

> However, if you have the time you can of course write your own FTP,
> TELNET (TN5250E), etc. servers yourself.

Not really what I'm looking to do.  :)


> The only one you will not be able to 'mirror' will be the standard
> twinax terminal (and APPN) way of connecting; you can change the look
> of sign-on screen, but not the underlying program that is called.

>From what I can tell about APPN connections from a brief examination in
the security implementation guide, I'm not worried so much about strong
auth there.

When I open up IBM Client Access on my PC, and do a regular old signon to
an AS400 on my local network, what exit point is triggered (potentially)?

/j

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.