> THIS IS A MESSAGE IN 'MIME' FORMAT.  Your mail reader may not support MIME.
> Some parts of this will be readable as plain text.
> To see the rest, you may need to upgrade your mail reader.
 
--_319a5bb9.62ef.0_okaumail.att.net=_
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
 
 
[Warning #1: with some trepidation, I've installed win95 and am answering
this via exchange -- results may vary...]
[Warning #2: I don't have the option turned on that causes my post to be
reflected back to me, so I'll never "see" if this worked OK or not --
could someone (Jeff?) warn me if this doesn't work out as expected?]
 
 ----------
From:  Leonard Berkowitz[SMTP:internet!BOSTON.WGL.COM!lberkowitz]
Sent:  Wednesday, May 15, 1996 12:25 PM
Subject:  Logon change
 
     Out of curiosity...
 
     We have a third-party application now running on our system.  It
     requires that a background job be running.  The application is a...
           [and so on...]
     Two questions:
 
     1.  How does the identity of a job change once it is in the EXEC
     state?
 
     2.  Why might the developers of this software want to do this (or
why
     would MPE/iX require them to do it)?
 
I think Stan's answer points out the how (AIF:changelogon), but the why
is a little more obscure.  I don't think the current version does, but
one of the early versions of VESOFT's security package did the same thing
when validating users via the AIF:PE facillity (since the background
process is what actually checks the logon information AND it is always
logged on as MANAGER.SYS, all background checks would succeed since, by
definition, SM users can log on as any user) [also, since it changes back
right after validating the user, you would rarely ever "see" a different
userid/jobname]
 
Essentially, the reason for changing user ID's in background processes is
to ALSO change the environment to be the same as if the job had logged on
that way originally.  (i.e., capabilities, file access, etc.)  Since the
developer cannot predict which user will be logging on and accessing the
data, a generic logon needs to be supplied just to get the job in the
background.  Once a user connects, the job must then switch to that
environment.  By doing it this way, the developer avoids any problems
associated with trying to start a NEW job (since things like job limits
might get in the way...) while gaining the advantage of ensuring proper
application security.
 
--_319a5bb9.62ef.0_okaumail.att.net=_
Content-Disposition: attachment; filename="WINMAIL.DAT"
Content-Type: application/octet-stream; name="WINMAIL.DAT"
Content-Transfer-Encoding: base64
 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 
--_319a5bb9.62ef.0_okaumail.att.net=_--