[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference csc32::consolemanager

Title:POLYCENTER Console Manager
Notice:Kits, Scans, Docs on CSC32:: as PCM$KITS:,PCM$DOCS:, PCM$SCANS:
Moderator:CSC32::BUTTERWORTH
Created:Thu Aug 06 1992
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:1541
Total number of notes:6564

1410.0. "GUI access problem" by ROM01::MENCHICCHI () Thu Oct 17 1996 11:54

Environment:

	PCM V1.6 ECO DCRS162 patch 308
	DEC3000/900 OSF/1

Problem:

	We have configured a privileged user to access not to all systems
	but only to a group of systems.

	When this privileged user invoke the PCM using the command

	#console -c system_name 	where system_name is NOT in the group
		
	PCM denied the access.
                   
	If the same user use the C3 GUI interface and try to connect to the
	console of that system the access is allowed; it seems that no access 
	control is made.


	How can I solve this double way to handle the same request?
	
	Thanks,
	Lorena
T.RTitleUserPersonal
Name		DateLines
1410.1SWTHOM::LEROYERCul qui gratte , main qui pueThu Oct 17 1996 14:119
	Hi Lorena

With PCM V1.6 ECO DCROSF162 patch 308 , i have exactly the same problem plus 
the problem describe in topic 1409. For me , it 's a big security problem.
Actually , the only workaround that i know , it 's to downgrade the patch 308.


Laurent
1410.2non PCM user access denied with DUNIX 3.2gROM01::MENCHICCHITue Oct 22 1996 06:3614
    Hi Laurent
    
    I tried to use the command   #console -c system_name
    with a non PCM user, and it works.
    The only 'feature' is that I get back the prompt # without any system
    message, as 'you are not a PCM user....' but this isn't a security
    problem.
    It seems that your configuration is the same of mine.
    
    I give you another info: the system version that is installed on my 
    DEC3000/900 is DUNIX 3.2g. Maybe an help for your problem?
    
    Ciao
    Lorena
1410.3use C3SWTHOM::LEROYERCul qui gratte , main qui pueThu Oct 24 1996 07:4210
	Hi Lorena, 

Yes , when a non PCM user use the command #console -c system_name  , it seems 
to work correctly  , but when the same user use #console C3  and connect on 
icon , it work. 
For me , it's security problem with this patches V308


Regards Laurent