Re: Clear text passwords. Was: Automating dsmserv

2003-05-28 Thread Marcel J.E. Mol
> alex /home/alex $ fg > dsmadmc -id=reports -pa=reports > quit > > ANS8002I Highest return code was 0. > > alex /home/alex $ r ps > ps -ef | grep dsm > alex 33488 20888 2 14:54:19 pts/6 0:00 grep dsm > alex /home/alex $ > > -Original Message- > Fro

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Robert Clark
uot;Justin Bleistein" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 27, 2003 12:24 PM Subject: Re: Clear text passwords. Was: Automating dsmserv > any alternatives to running: "dsmserv" via batch mode with the: > > dsmadmc -id=login -pass=password syntax

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Stapleton, Mark
From: Stephen E. Bacher [mailto:[EMAIL PROTECTED] > A slight improvement on security would be something like: > > dsmadmc -id=login -pass=`cat /private/tsm/password.txt` > > where /private/tsm/password.txt is readable only by the > user/process that > invokes dsmadmc. You could do this in com

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Nicholas Cassimatis
cc: Sent by: "ADSM: Subject: Re: Clear text passwords. Was: Automating dsmserv Dist Stor Manager" <[EMAIL PROTECTED] DU> 05/27/2003 03:24 PM

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Alex Paschal
ps -ef | grep dsm alex 33488 20888 2 14:54:19 pts/6 0:00 grep dsm alex /home/alex $ -Original Message- From: Marcel J.E. Mol [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2003 1:42 PM To: [EMAIL PROTECTED] Subject: Re: Clear text passwords. Was: Automating dsmserv On Tue, May

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Tom Kauffman
to:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2003 3:44 PM To: [EMAIL PROTECTED] Subject: Re: Clear text passwords. Was: Automating dsmserv I mean the administrative client the: "dsmadmc" program on the tsm server side. You can automate him to run tsm server commands in batch mode from like a s

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Justin Bleistein
EMAIL PROTECTED] Thomas Denier <[EMAIL PROTECTED]To: [EMAIL PROTECTED] IL.TJU.EDU> cc: Sent by: "ADSM: Subject: Re: Clear text passwords. Was: Au

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Justin Bleistein
To: [EMAIL PROTECTED] DATA.COM>cc: Sent by: "ADSM: Subject: Re: Clear text passwords. Was: Automating dsmserv Dist Stor Manager" <[EMAI

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Marcel J.E. Mol
On Tue, May 27, 2003 at 04:06:32PM -0400, Stephen E. Bacher wrote: > Justin Bleistein <[EMAIL PROTECTED]> wrote: > > >any alternatives to running: "dsmserv" via batch mode with the: > > > >dsmadmc -id=login -pass=password syntax... > > > >I mean it's passwords in clear text so all someone has to do

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Thomas A. La Porte
On Tue, 27 May 2003, Stapleton, Mark wrote: >One of the nice things about how Tivoli has handled TSM is that the >authentication system is *exactly* the same, no matter what the server >and client OS platforms may be. The same can be said for the interfaces >and the way administration is performed

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Thomas Denier
> one solution: > > We created an admin account (ex. QUERY), that is granted no authority. > Which means it can do queries, but can't change anything. > For scripts that just do queries, we use that admin id and don't sweat > whether it's hackable. > Now in theory somebody could find out the passwo

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Prather, Wanda
.. -Original Message- From: Justin Bleistein [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2003 3:24 PM To: [EMAIL PROTECTED] Subject: Re: Clear text passwords. Was: Automating dsmserv any alternatives to running: "dsmserv" via batch mode with the: dsmadmc -id=login -pass=passwo

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Stephen E. Bacher
Justin Bleistein <[EMAIL PROTECTED]> wrote: >any alternatives to running: "dsmserv" via batch mode with the: > >dsmadmc -id=login -pass=password syntax... > >I mean it's passwords in clear text so all someone has to do is cat that >file and your exposed... Any ideas on how to automate the client-s

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Remeta, Mark
EMAIL PROTECTED] Subject: Re: Clear text passwords. Was: Automating dsmserv any alternatives to running: "dsmserv" via batch mode with the: dsmadmc -id=login -pass=password syntax... I mean it's passwords in clear text so all someone has to do is cat that file and your exposed...

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Justin Bleistein
To: [EMAIL PROTECTED] COM> cc: Sent by: "ADSM: Subject: Re: Clear text passwords. Was: Automating dsmserv Dist Stor Manager" <

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Jurjen Oskam
On Tue, May 27, 2003 at 08:48:00AM -0700, Thomas A. La Porte wrote: > Since this topic of clear text passwords has arisen, I wonder if > anybody knows whether or not there is/are any outstanding > requirements or enhancement requests for Kerberos support within > TSM. This would be handy both in t

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Stapleton, Mark
From: Thomas A. La Porte [mailto:[EMAIL PROTECTED] > Since this topic of clear text passwords has arisen, I wonder if > anybody knows whether or not there is/are any outstanding > requirements or enhancement requests for Kerberos support within > TSM. This would be handy both in the situation disc

Re: Clear text passwords. Was: Automating dsmserv

2003-05-27 Thread Thomas A. La Porte
Since this topic of clear text passwords has arisen, I wonder if anybody knows whether or not there is/are any outstanding requirements or enhancement requests for Kerberos support within TSM. This would be handy both in the situation discussed below, and for general administrative and node access