Hello All,

RE: FTP STREAMING job security

FTP "SITE STREAM" has no special password solutions.  The standard MPE
logon password for FTP to access the system applies and the job
streamed with the "SITE STREAM" command must include a valid job logon
with passwords.

One additional security option is available, the FTP/iX "SITE STREAM"
command can be disabled.  Here is the details from the FTPDOC.arpa.sys
file:

************************************************************************
SITE STREAM command:
************************************************************************

The "SITE STREAM" command is an enhancement added to the FTP Server
"FTPSRVR" to support the execution "STREAM" of a MPE batch job file from
a FTP client which has already established a connection to the HP e3000.

Syntax:

  SITE STREAM <file-name>

The "SITE STREAM" file-name value is a MPE file name.  The file name is
assumed to be a valid MPE job stream file and the MPE command ":STREAM
<file-name>" is executed against this file.  The return value from this
command is "200 STREAM command ok." or in the case of an error executing
this command a "550" error with an appropriate MPE error message text is
returned.

Note: The MPE job number or the MPE job execution output is not returned
to FTP.

The "SITE STREAM" command now can be turned off by the "SITE_STREAM =
OFF" option in the SETPARMS.ARPA.SYS file.
************************************************************************


Regards,

James Hofmeister
Email: <first>.<last>@hp.com
Hewlett Packard - Global Solutions Engineering (WTEC)
P.S. My Ideals are my own, not necessarily my employers.

---------------------------------
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *