Re: Login Issues at QPWDLVL 2 for some users

[Gord Hutchinson <gordm1@xxxxxxxxxxxxxxx>]

> On Wed, 24 Nov 2010 11:17:02 -0500, Charles Wilt <charles.wilt@xxxxxxxxx> wrote:

> Gord,
>
> Unless you're using encrypted telnet, the user id and password type
> into the 5250 green screen sign on are sent in the clear; a network
> sniffer can easily see them.
>
> However, when using bypass-signon, the user id and passwords are
> encrypted into the request to start the session even when the
> resulting telnet session is unencrypted.
>
> HTH,
> Charles

Thanks.  I didn't realize that.  Our concern is that if you bypass-signon,
someone just needs to disconnect and reconnect the 5250 iseries access
session and it will automatically sign you on.  Potentially as someone else.


Gord