HP UX SNAplus2 manual Win32 Client Security, Snapwinsec domain, Snapwinsec off

Managing SNAplus2 Clients

Managing Win32 Clients

Win32 Client Security

SNAplus2 provides a facility for validating the user name and password of any Win32 client running on Windows 95 and attempting to contact a server running SNAplus2. This enables you to ensure that only authorized Windows users are able to access the SNAplus2 system. On Windows NT no validation is performed (the fact that the user had to enter a password to access the desktop is considered to provide sufficient security).

By default, Win32 client security is not active, so that any computer with the Win32 client software installed can access SNAplus2 servers. To enable Win32 client security, use the following procedure:

Step 1. Agree on a user name and password with each Win32 client user who is authorized to access the SNAplus2 system.

Step 2. On all servers that this client can access, define this user name and password to the HP-UX system as a system user name.

Step 3. After enabling the SNAplus2 software on a server, use the following command:

snapwinsec domain

This command enables Win32 client security on all servers in the SNAplus2 domain. You do not need to repeat the command when enabling the SNAplus2 software on other servers.

When a Win32 client starts up and tries to access a server on which Win32 client security is enabled, the client software displays a pop-up message requesting a password. This password from the Registry is checked against the user names defined to the HP-UX system on the server. If the Win32 client user does not specify a password, or if the user name and password cannot be matched with a user name and password on the server, the server rejects the client's access attempt.

To stop using Win32 client security, so that any Win32 client user can access SNAplus2 servers without having to specify a password, use the following command:

snapwinsec off

This command removes Win32 client security on all servers in the SNAplus2 domain. You do not need to repeat the command on other servers.

256 Chapter 11