Re: iSeries Telnet authentication

The hope is to bypass the signon screen.  Much like you can do with 
iSeries Access.  You can tell iSeries Access to use either the signin you 
used to originally connect to the i5, or to use EIM.

Now, with FTP you can take someone who signs in with anonymous, or with an 
ldap id, and tell the ftp server to use this other i5 id instead.  You can 
configure a many-to-one.  For example, if one customer has 5 ldap id's to 
get to your system (1 for each salesperson for example) then all 5 ldap 
id's can be tied back to one i5 id.  Granted, it makes logging a little 
interesting.  But it gives YOU the option as to what you want to do at 
your shop.

And the odds are high that all 5 of these salespeople would have the same 
menu anyway.  Also the telnet exit program does allow you to specify 
initial program.  I didn't research it enough to see if it allows you to 
pass it a parameter.  Not that you want to create a separate program for 
each ldap user to differentiate menus, but you could.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





Edwin Davidson <EDavidson-FhXUXP1Pus5Wk0Htik3J/[email protected]> 
Sent by: security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]
09/19/2006 10:22 AM
Please respond to
Security Administration on the AS400 / iSeries  <security400-Zwy7GipZuJhWk0Htik3J/[email protected]>


To
Security Administration on the AS400 / iSeries <security400-Zwy7GipZuJhWk0Htik3J/[email protected]>
cc

Subject
Re: [Security400] iSeries Telnet authentication






Forgive my ignorance, but what is the point of this?

Whenever I telnet to the AS/400, I want to get to my AS/400 menus under 
my profile.

If you were validating against an external LDAP, would this validation 
be prior to displaying the signon screen thus having 2 realms of 
authentication? 


Toulousse wrote:
> Hi there,
>
> Is there anyway I can authenticate Telnet users vs an LDAP server (not 
the iSeries LDAP server)?
>
> For ftp login I think I can use the QIBM_QTMF_SVR_LOGON exit point and 
then write a program to validate user id and password using LDAP API's.
>
> Is there anything similar for telnet users? 
>
> Thanks.
>
> _______________________________________________
> This is the Security Administration on the AS400 / iSeries (Security400) 
mailing list
> To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/security400
> or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/security400.
>
>
> 


http://www.primeinc.com
**********************************************************************
This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to
whom they are addressed.  If you have received this email
in error please reply to the sender of the message.

The views expressed in this correspondence may not
reflect the views of Prime, Inc.

This footnote also confirms that this email message has
been scanned for the presence of computer viruses.
**********************************************************************
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) 
mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.