[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference azur::mcc

Title:DECmcc user notes file. Does not replace IPMT.
Notice:Use IPMT for problems. Newsletter location in note 6187
Moderator:TAEC::BEROUD
Created:Mon Aug 21 1989
Last Modified:Wed Jun 04 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6497
Total number of notes:27359

4992.0. "Multiple users of DECmcc and security" by ADO75A::BOUCHER () Mon May 03 1993 20:30

    Greetings,
    
    I am trying to setup a situation where NETMAN is like GOD on the system
    (all things to all people) and another user who has a limited view of
    the world (only their own domain).
    
    I have copied their domain (.dept_of_primary_industry) into their own
    directory (user$disk:[dpi]), as well as a copy of MCC_RESOURCE.DAT
    (they will be accessing DECmcc from a PC via eXcursion).  I have set a
    logical for MCC_MAPS which points to their directory, and everything
    appears to work fine.  If they try and open another domain because it
    can't find the map files in MCC_MAPS it appears all screwed up (minus
    backdrops, default icons, etc, which is what I would expect).
    
    Q:  Is there any way that they cannot see any other domains at all ? 
    The customer is extremely hot on security, and the router network is
    shared by many differnet departments.  They want to allow each
    department to see only their network, and no-one elses.  Are there
    additional security restrictions that need to apply ?  The manuals talk
    a lot about multiple users and alarms, but not multiple users of the
    IMPM.
    
    Thanks in advance.
    
    Reece Boucher
    Adelaide, Australia
T.RTitleUserPersonal
Name
DateLines
4992.1try using DNS GOSTE::CALLANDERTue May 11 1993 16:498
    have you played around with useing DNS for your nameserver and then
    utilizing the access control functions in DNS? You could create
    a public access domain directory where you create the public domains,
    and then a secure directory (which requires privs to see) for those
    domains that you want to restrict to specific users?
    
    just an idea
    
4992.2Not quite the problemADO75A::BOUCHERThu May 13 1993 05:1016
    I see what you are getting at, but I believe the problem lies in the
    fact that the MIR has all entities for all domains registered within
    it.  I can restrict access to the maps by placing them in separate
    directories, but DECmcc still looks in the MIR and determines that
    entities do exist, it just cannot find the map file to display it
    correctly.
    
    I may be a little off the target with this.  Correct me if I am wrong.
    
    As a side issue, the customer has expressed no interest in using DNS,
    and would be loath to run it (as well as purchase it) just for DECmcc.
    
    Comments appreciated.
    
    
    /Reece...