I might add, that if you implement the BACKG job VESOFT will check the
logons without the UDCs. Also, look into the HELLO.DATA.VESOFT file. This
can be configured to allow/disallow a user from submitting a job through
FTP. In fact most of the bandwidth I have seen on this subject is addressed
in this file.

I still like the UDC set to a number of seconds. Very nice touch!

-----Original Message-----
From: Ken Kirby [mailto:[log in to unmask]]
Sent: Friday, March 10, 2000 7:34 AM
To: [log in to unmask]
Subject: Re: Creating an "FTP only" user


Actually this is a little easier than you might think, since IA is not
required to logon through FTP. So just set the user up with SF,BA and that
takes care of sessions.

Unfortunately, you still have to do something to prevent folks from
submitting jobs under the FTP logon. MPE won't let you set up a user with
neither BA nor IA.

Personally, I think this is a security hole, since it allows someone to
logon to a "BA only" account using an interactive tool. However, in this
case, it could work to your advantage.

--Ken Kirby
  Management Information Systems
  Vanderbilt University