Doug and I discussed the relevance of some personal email, I suggested
posting parts, and he gave permission (just to mention that I did not
violate netiquette in this or in my previous post). The rsh thread / 3K
to NT job initiation is elsewhere, and I will later post how I have
tried to secure ftp jobs, both for the benefit of the security conscious
and to elicit feedback, especially for what I might have missed. Doug
mentions NT's IIS FTP server, for which there are certainly issues,
whereas using Security/3000 to control access to the 3K's ftp is
probably of interest. I would guess that a non-trivial number of us have
an NT box somewhere; even if it is a workstation, I understand that it
can function as a server as well, at least for the 3K to talk to.

Doug mentions 3K / NT security considerations in the context of ftp,
although he may have had larger issues in mind. Besides normalities such
as ftp, and oddities such as rsh, what are the problems and solutions?
telnet comes to mind as an oddity, although I could easily be wrong
about that one. Sockets and DCE / RPC come to mind as normal, although
the latter is probably rare in our community. Having both a 3K and an NT
server visible on the same network, or choosing one's subnet mask for
this comes to mind. And I would be amiss if I didn't at least mention
SAMBA considerations, although I think that that is probably more
straightforward.

>----------
>From:  Doug Larson[SMTP:[log in to unmask]]
>Sent:  Tuesday, November 04, 1997 3:42 PM
>To:    Stigers, Greg  ~ AND
>Subject:       RE: 3K to NT job initiation
>
>At 03:19 PM 11/4/97 -0500, you wrote:
>>[good stuff snipped]
>>
>>With your permission, I would like to post this, either as is...
>
>I think it's a good idea.
>
>We have a similar, though less elaborate, FTP setup for a couple of jobs,
>but I'm not happy with it.  A discussion about HP3000 / NT security would
>be helpful.  The IIS FTP server doesn't appear to allow different logon
>configurations for different virtual servers; I've been tempted to scrap it
>and go to a Reflection script running on a dedicated PC for file transfers,
>but haven't made up my mind yet... perhaps another PC behind the firewall
>running the WRQ FTP server would be better.
>
>Doug
>
>
>