[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference vaxaxp::vmsnotes

Title:VAX and Alpha VMS
Notice:This is a new VMSnotes, please read note 2.1
Moderator:VAXAXP::BERNARDO
Created:Wed Jan 22 1997
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:703
Total number of notes:3722

313.0. "DEC ZAP for VMS 6.2?" by MLNCSC::BORGINI () Wed Mar 12 1997 10:22

Hi folks,
        I need an information about our ASSET product named DEC ZAP.

A customer of mine has interested to buy this product, to solve his
specific requirement.
He would like to kill user processes logged but inactive during the
night, and for this requirement doesn't help setting hours, days or
minutes in specific accounts (this blocks only possible new logins).
There is a specific ASSET product, named DEC ZAP for OpenVMS (see
SPD 46.17.00) useful for this case, only until OpenVMS 6.1.
Is it available anywhere this product for OpenVMS Alpha 6.2 for an
AlphaServer 2100?
Thanks in advance for any hints.
Regards,
       Roberto.
T.RTitleUserPersonal
Name
DateLines
313.1Wrong Conference, Retired Product...XDELTA::HOFFMANSteve, OpenVMS EngineeringWed Mar 12 1997 11:1712
   The Assets ZAP product is being discussed over in the European Assets
   notes conference -- from what I can tell, the entire Assets program
   is currently undergoing a reorganization.  See CLARID::EOASSETS.

   ZAP was retired a while back.  Also see the ZAP notes conference at
   SHARE::ZAP.  (If you're not sure about the location or the name of a
   notes conference, "search humane::sys$public:easynotes.lis zap"...)

   There are third-party idle-process killers available from a variety
   of sources, and freeware available from DECUS and other sources.

313.2There are also 3rd party productsSTAR::DEMERSLeo 381-2245 OpenVMS/SEVMS SecurityPMWed Mar 12 1997 11:3414
Roberto,
   If you cannot get an answer regarding ZAP please keep in mind
  that some of our partners sell products that will solve this
  problem on OpenVMS for your customer.
   Two products that I can think of off the top of my head are
  Axent's KBLOCK and Braintree's VIGIL. I think OpenVISION has
  a product that does something similar as well. 

                                          - Leo Demers
                                          OpenVMS & SEVMS 
                                          Security Product Manager
                                          Tel: (603)881-2245
                                          DTN:381-2245
  
313.3AUSS::GARSONDECcharity Program OfficeWed Mar 12 1997 17:0419
re .0
    
>He would like to kill user processes logged but inactive during the
>night, and for this requirement doesn't help setting hours, days or
>minutes in specific accounts (this blocks only possible new logins).
                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    
    False.
    
    If you are logged in and the hour rolls over and you would not now be
    allowed to log in, you will be killed by VMS with the following message.
    
%SYSTEM-F-FORCEDEXIT, forced exit of image or process by job controller
    
    However this makes no distinction as to whether the process was idle
    and so may not meet the customer's stated requirements.
    
    As always when the topic of IPKs comes up, the question arises as to
    why they feel they need to do this.
313.4Thanks!MLNCSC::BORGINIThu Mar 13 1997 03:426
Hi to all,
          many thanks for your quick suggestions. 

Best regards,
             Roberto.

313.5one possiblitySTAR::ABISI come in peaceThu Mar 13 1997 10:2815
>         <<< Note 313.3 by AUSS::GARSON "DECcharity Program Office" >>>
>
>    As always when the topic of IPKs comes up, the question arises as to
>    why they feel they need to do this.

I'm only guessing, but one reason could be due to license restrictions.  Unlike
our internal systems, many customers are not licensed for unlimited use. 
Therefore, inactive/idle logins can prevent people with real work from logging
in.

Perhaps if we had to work under the same conditions, there would be hooks in
the operating system to make things easier (and less kludgy) for tools like
ZAP.

Eric
313.6Yah, KBlock's good. some info about it.STAR::EVERHARTFri Mar 14 1997 14:2519
    ahem...
    having worked on KBlock a bit, I'll mention that the XAutolock program
    might also be considered for idle workstations. KBlock is otherwise
    rather unaware of X connections. One can, with recent Digital X
    servers, do rather better since they implement the xidle extension
    but with older Digital X code, XAutolock needs to get in the input
    chain. It does run on VMS however, and is reliable.
    
    For terminals, I like WATCHER (free, from DECUS, sigtapes, or net)
    and have used it. However, the ability to lock a terminal via a
    terminal port/class intercept and block terminal traffic with no
    other effect is unique to KBlock. The others can suspend processes,
    stop them, forcex, or in a few cases detach them. Last I heard
    of, KBlock was only on Vax, but may have been ported by now.
    (One obstacle when I worked with it was that a good chunk of the
    code was in Vax BASIC. I think they were translating it all to C
    though.)
    glenn everhart
    
313.7More info on Kblock & VigilSTAR::DEMERSLeo 381-2245 OpenVMS/SEVMS SecurityPMMon Mar 17 1997 17:1113
    Here's some pointers to the products I mentioend earlier.
      Kblock runs on Vax and Alpha there are More details at: 
    http://www.axent.com/product/classic/kblock1.htm
   
   Looks like they are using XautoLock (but from a 3rd party?) 

    Also Braintree's Vigil product info is available at:

    http://www.braintree.co.uk/BT_VIGIL.HTM


                                          - Leo