In <[log in to unmask]> [log in to unmask] writes:
I'd be a little worried about IP address "spoofing" with just
testing for the IP address. The hardware address at least
verfies that the sessions comes from the proper desktop system.
Bruce.
>
> Michael Anderson writes:
>
> >Hello everyone,
> >
> >Here we have security at the LDEV level. To achieve this LDEV level
> >of security all applications here hit a dataset of LDEV's an
> >associated items. I'm currently looking into switching to VT
> >sessions and networked access. I'm not panning on a re-write of
> >anything, I plan on using the NSINFO intrinsic to see if the caller
> >is a VT session, or a serial ATP session. Then interrogating the
> >various network layers to find the ethernet board id number or the
> >TCP/IP address. Then using a cross-reference dataset I will reference
> >the ethernet id to retrieve the LDEV number and be right back in
> >business with LDEV level security. Anyone know of another way?
>
> Michael,
>
> In 5.5 the client ip address (and more) will be available in mpe vars.
> There may even be a patch for 5.0, but I'm not sure. If you don't want
> to wait to get the mpe var support you can download a zip package which
> contains the source code to call NSINFO to determine the client ip
> address at: http://www.qss.com/vtverify.zip
>
> The code is free for your use. Hope it helps.
>
> Duane Percox ([log in to unmask] v/415.306.1608 f/415.365.2706)
> http://www.qss.com/http://www.qss.com/qwebs
> http://www.qss.com/faq3khttp://www.qss.com/qsdk
----------------------------------------------------------------------
Bruce J. Senn Phone: (518) 388-6664
Senior System Manager FAX: (518) 388-6458
Union College Internet: [log in to unmask]
Schenectady, NY 12308
----------------------------------------------------------------------
