[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference share::zap

Title:Zap Technical Conference
Notice:ZAP Version 5.3 is available. See note 1.1
Moderator:ZAPDEV::MACONI
Created:Mon Feb 24 1986
Last Modified:Mon May 05 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:170
Total number of notes:492

112.0. "V5 Question" by SALEM::FLYNN () Fri May 01 1992 17:02

    Hi,
    
    We have installed ZAP V5.0 and have been very pleased so far. We have 
    approx. 90 EWS users booted into our cluster and we are concerned 
    about security if the workstations are left logged in overnight.
    
    I configured ZAP with GROUP_DW true, TRACEBACK false, LENIENT false,
    and SENSITIVITY set to 8. With traceback set to false, each subprocess
    should be killed after 45 minutes of inactivity. Once all the
    subprocesses are dead then the parent process should now be treated 
    as non-exempt and killed after another 45 minutes. 
    
    This happened exactly as planned as long as the workstations were
    not paused. If people pause their workstations, none of the processes
    got killed.
    
    The question is does DECW$PAUSESESSION.EXE cause enough action to 
    keep these processes alive even though the sensitivity is set to 8?
    
    Thanks,
    
    Bob
T.RTitleUserPersonal
Name		DateLines
112.1Pausing windows uses a lot of resourcesZAPDEV::MACONIThe Doctor is InMon May 04 1992 12:5620
	When DECwindows or Motif is paused, the session manager does an
	extremely large amount of looping.  This causes the session manager
	to be active when paused.  As noted in section 3.1 of the user guide,
	the session manager must perform a multiple of the sensitivity level
	in order to be active.  I have tested this under VMS 5.5/Motif and
	found that even a sensitivity level of 15 (not recommended) would not
	cause a paused session to be terminated in most situations.

	This, of course, is considered a feature.

	Do you really want to kill paused workstation sessions?  Sessions on
	remote systems will still be killed because ZAP on the remote system
	would not see the paused session.  One of the advantages of ZAPs
	current behavior is that is promotes users to pause their workstations
	when they are not using them and thus increases security.

	Unfortunately, this behavior is not due to ZAP, but due to the way
	that DECwindows and Motif pause the system.

					Keith
112.2I'm with you...SALEM::FLYNNWed May 06 1992 10:588
    I agree with you. In my estimation it solves a couple of problems.
    My management currently wants everything that's idle to be killed.
    
    I'm working on changing their minds...
    
    Thanks,
    
    Bob