Re: script to change Client Access .ws profiles

["Jim Franz" <franz400@xxxxxxxxxxxx>]

> In your situation, how does adding the Bypass Signon flag "remove a 
> security prob"?
It's more for bypassing the green screen telnet signon that passes the pwd 
in clear text.
(or have they fixed this? this site running an old CA Express).
jim

----- Original Message ----- 
From: "Steve Martinson" <smartfamily2003@xxxxxxxxx>
To: "midrange forum" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, August 14, 2007 12:42 AM
Subject: RE: script to change Client Access .ws profiles


> > Appreciate the info. We are needing to update certains paramaters (like 
> > system name), hopefully add the Bypass > Signon flag (to remove a 
> > security prob)...
>
> Sorry for the late reply.  I work at client sites all day...  In your 
> situation, how does adding the Bypass Signon flag "remove a security 
> prob"?  Wouldn't you be introducing additional risk by allowing the 
> double-clicking of the CA icon to take the 'clicker' straight to the 
> initial menu/program of the already authenticated user (regardless of who 
> actually does the double-clicking)?  Your desire to do this implies that 
> you have strong workstation/desktop security controls that would mitigate 
> this risk.
>
> Best regards,
>
> Steven W. Martinson, CISSP, CISM (passed the CISA on 06/09/07)
> Sheshunoff Management Services, LP.
> Senior Consultant - Technology & Risk Management
> 2801 Via Fortuna, Suite 600 | Austin, TX 78746
> Direct: 281.758.2429 | Mobile: 512.779.2630
> e.Mail: smartinson@xxxxxxxxx
>
>
>
> ____________________________________________________________________________________Ready 
> for the edge of your seat?
> Check out tonight's top picks on Yahoo! TV.
> http://tv.yahoo.com/
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.