[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference csc32::consolemanager

Title:POLYCENTER Console Manager
Notice:Kits, Scans, Docs on CSC32:: as PCM$KITS:,PCM$DOCS:, PCM$SCANS:
Moderator:CSC32::BUTTERWORTH
Created:Thu Aug 06 1992
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:1541
Total number of notes:6564

1398.0. "Replace DECwindows Motif Login Box w C3 question" by CHOWDA::GLICKMAN (writing from Newport,RI) Tue Oct 01 1996 14:13

    I have been working the "Console Manager - How to Replace the 
    DECwindows Motif Login Box with the C3".  It does a fine job of
    bringing up the C3 interface on boot.  My one question is there any way
    to make these processes have the priviledges I set up for the
    Operator account (limited access to PCM -  i.e., no Reconfiguration or
    Edit capabilities for example)?
    
    Appreciating any assistance!
T.RTitleUserPersonal
Name
DateLines
1398.1SNOFS1::ELLISSAre you all sitting too comfybold square on your botty? - Then we'll beginWed Oct 02 1996 19:163
Well, it runs under the SYSTEM username, so set up the SYSTEM account on your box

Shaun
1398.2Don't think that will workCHOWDA::GLICKMANwriting from Newport,RIMon Oct 07 1996 10:425
    If what you mean is to create an entry in PCM for the SYSTEM account
    according to the documentation (User's Guide page 3-34) it won't
    work.  PCM will use the defaults.  Am I missing something?
    
    Thanks.
1398.3CSC32::BUTTERWORTHGun Control is a steady hand.Tue Oct 08 1996 13:5921
    Nope. You are correct. The SYSTEM username always has access to all
    PCM functions. 
    
    The biggest challenge to overcome has to do with the fact that there is
    no /USERNAME qualifier on the RUN/DETACH command because there is
    no "username" argument to the $CREPRC system service.
    RUN/DETACH/AUTHORIZE is not good enough becuase you still wind up using
    the username of the process that called RUN/DETACH and thus the C3
    started during boot has username SYSTEM. One could write some
    privileged code to change the username of the process. Without proper
    protection of that image, you'd have a security hole big enough to
    drive a truck through. The Quick and Dirty method is to take advantage
    of the /USERNAME qualifier of the SUBMIT command. Write another
    procedure that runs in BATCH and set the DECW$MAINAPP symbol so that
    it submits this procedure to batch using the /USERNAME qualifier. This
    procedure will then RUN/DETACH the procedure that runs the C3. This
    will prevent tying up a batch queue and prevent an operator from
    stopping the C3 accidentaly if they muck with the queue manager.
    
    Regs,
      Dan