Re: Login Issues at QPWDLVL 2 for some users

[Charles Wilt <charles.wilt@xxxxxxxxx>]

Gord,

Unless you're using encrypted telnet, the user id and password type
into the 5250 green screen sign on are sent in the clear; a network
sniffer can easily see them.

However, when using bypass-signon, the user id and passwords are
encrypted into the request to start the session even when the
resulting telnet session is unencrypted.

HTH,
Charles

On Wed, Nov 24, 2010 at 10:58 AM, Gord Hutchinson
<gordm1@xxxxxxxxxxxxxxx> wrote:
> > On Wed, 24 Nov 2010 09:48:04 -0500, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:
>
> > Good suggestion.  It should be noted that unless you're using
> > encrypted sessions, bypassing sign-on is actually more secure than
> > presenting the non-encrypted 5250 signon screen.
> >
> > HTH,
> > Charles
>
> I don't follow.  How is it more secure bypassing the second (green screen)
> signon?  I do it out of convenience more than anything else (Who wants to
> type the same userid/password twice?) but most users do the double sign in.
>
>
> Gord
>
> --
> Gord Hutchinson
> Database Administrator, IT
> TST Overland Express
> ghutchinson@xxxxxxxxxxxxxxx
> 905-212-6330
> fax: 905-602-8895
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.