HP3000-L Archives

February 1995, Week 2

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Michael Hornsby <[log in to unmask]>
Reply To:
Date:
Mon, 13 Feb 1995 09:55:11 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (28 lines)
All this talk of  breaking security and the most tacit issues needs to be put forth!
 
The simplest method has always been to read the directory in from a recent
backup using FCOPY and the SKIPEOF option.  If you aren't using the
DIRECTORY option on the store then this won't be a problem, but you also
won't be backing up the accounting structures. The reason that this is a big
problem is that  many sites will switch DAT tapes first thing in the morning
and put a recent backup on-line for tonight's backup.
 
The solution is for HP to encrypt the directory so that it can be stored safely. A
work around is to use the BULDACCT utility to create jobs that can rebuild the
accounting structure. These jobs can be stored as part of the backup and then
purged.
 
By the way, restoring with the DIRECTORY option WILL change the
passwords on the system. One of the worst nightmares a system manager could
have is all the passwords changed to a forgotten version and all the sessions
logged off.
 
For those of you who would like more information on security the August 1989
issue of Interact has an article I wrote that covers more of  these kinds of issues.
 
Michael Hornsby
Beechglen Development Inc.
5576 Glenway Ave.
Cincinnati, Ohio 45238
 (513) 922-0509

ATOM RSS1 RSS2