| Title: | *OLD* ALL-IN-1 (tm) Support Conference | 
| Notice: | Closed - See Note 4331.l to move to IOSG::ALL-IN-1 | 
| Moderator: | IOSG::PYE | 
| Created: | Thu Jan 30 1992 | 
| Last Modified: | Tue Jan 23 1996 | 
| Last Successful Update: | Fri Jun 06 1997 | 
| Number of topics: | 4343 | 
| Total number of notes: | 18308 | 
    
    ALL-IN-1 CAPTIVE ACCOUNTS
    
    I need to know what forms and functions to watch out for (or disable)
    that allow captive ALL-IN-1 users access to DCL.
    
    Also, are there any gotchas when setting up ALL-IN-1 captive accounts for 
    VAX PSI (packet switch) users on a VMS 5.5, ALL-IN-1 2.4/3.0, cluster 
    system? 
    
    Thank you,
    		Jane
| T.R | Title | User | Personal Name | Date | Lines | 
|---|---|---|---|---|---|
| 822.1 | Easy with V3.0... | IOSG::PYE | Graham - ALL-IN-1 Sorcerer's Apprentice | Sat Jun 06 1992 19:54 | 12 | 
|     V3.0 - If you turn all the new profile switches off, then as long as
    they don't actually have CMDPRV or DCLPRV, then we think it's pretty
    watertight now.
    
    V2.4 and earlier, you basically need to stop them executing UDPs.
    
    In both cases, you need to do the usual VMS setups, including stopping
    them changing their LOGIN.COMs.
    
    I have no idea if the PSI stuff causes any further complications!
    
    Graham
 | |||||
| 822.2 | No problem | IOSG::TALLETT | Arranging bits for a living... | Mon Jun 08 1992 10:46 | 18 | 
|     
    > on a VMS 5.5, ALL-IN-1 2.4/3.0, cluster system?
    
    	See other notes about some general V5.5 issues (not captive
    	account related).
    
    > VAX PSI (packet switch)
    
    	I used to support this in a previous life, and I can't think of
    	any tricks that an X.29 terminal user might get up to (if that is
    	what you are talking about). The session looks like a fairly
    	standard terminal session, but the user can "escape" into an
    	X.29 setup mode (with some control sequence, maybe underscore, I
    	forget) and change some settings, but I don't think there is
    	anything naughty they can do in there.
    
    Regards,
    Paul
 | |||||
| 822.3 | Users can spawn out of ALL-IN-1 to DCL from PSI | GIDDAY::SETHI | Man from Downunder | Wed Jun 17 1992 08:09 | 10 | 
|     Re .2
    
    VAX PSI - if the user escapes to the X.29 mode you can use the spawn
    PSI command to spawn out to DCL.  The PRCLM parameter in SYSUAF has to
    be set to 0 which means that you cannot create spawned processes BUT
    please check this.
    
    I have come across this problem in the past.
    
    Sunil
 | |||||