• Re: Demand user management on PS2200

    From Andrew@21:1/5 to sboy...@gmail.com on Sun Dec 4 19:11:05 2022
    sboy...@gmail.com wrote:
    How do I add a new demand user on PS2200? I can't seem to be able to find the SIMAN processor.

    I would rather not run everything as the security admin.


    SIMAN was offloaded to Teamquest and is unavailable on PS2200.

    There's a processor / package called @SECMGR which can be used instead,
    I looked at it years ago and it seemed to be 100% compatible to @siman,b
    with the additional possibility of a front end running under Windows.
    That front end needs to be configured in cpCOMM and maybe COMAPI. You
    also need to download and install the front end from the Unisys website.

    Unfortunately I can't find the documentation on the DVD. There's
    another option called "ClearPath OS 2200 Apex" but look at the system requirements and weep.

    My suggestion, use the Search function on the DVD and look for SECMGR.
    I'm using Linux at the moment and that "feature" is unsupported. It is
    quite possible that the processor needs some option or other, I can't
    remember.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sboydlns@gmail.com@21:1/5 to All on Sun Dec 4 09:16:54 2022
    How do I add a new demand user on PS2200? I can't seem to be able to find the SIMAN processor.

    I would rather not run everything as the security admin.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve J. Martin@21:1/5 to All on Mon Dec 5 04:07:47 2022
    SECMGR was originally its own product. It was batch-only (no full-screen interface) and fully compatible with @SIMAN,B. Later it became part of APEX. While APEX allows you to manage security via a Windows interface, @SECMGR is still fully compatible
    with @SIMAN,B.

    @SECMGR is what I use for all security work on our real Dorados.

    Cheers,
    Steve J. Martin

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sboydlns@gmail.com@21:1/5 to Steve J. Martin on Mon Dec 5 12:07:08 2022
    On Monday, December 5, 2022 at 7:07:48 AM UTC-5, Steve J. Martin wrote:
    SECMGR was originally its own product. It was batch-only (no full-screen interface) and fully compatible with @SIMAN,B. Later it became part of APEX. While APEX allows you to manage security via a Windows interface, @SECMGR is still fully compatible
    with @SIMAN,B.

    @SECMGR is what I use for all security work on our real Dorados.

    Cheers,
    Steve J. Martin

    Well, it has been about 35 years since I last worked on a 2200 and I guess the mojo has gotten weak.

    I added a user using secmgr using:

    ins use=sboyd run_mode=demand,tip,batch password=password;

    Displaying the user id yields this:

    dis use=sboyd; ******************************************************************************
    USERID SBOYD SECURITY MANAGER 4R4A 2019-02-16 12:15:47 EST ******************************************************************************
    S E C U R I T Y I N F O R M A T I O N
    SBOYD was installed on 2019-02-16 12:13:20 EST
    SBOYD has no administrative powers
    Authentication Type 0
    SBOYD is forced to change password at logon
    SBOYD has a user-specified password encrypted using DES
    SBOYD has no password hashes
    Utilize (system default) minimum password days of 0
    Utilize (system default) maximum password days of 730
    Maximum 0 days of inactivity before disable
    Maximum 0 invalid passwords before disable
    Maximum 0 password-expired notices ignored before disable
    SBOYD is owned by the User-id SECURITY
    Minimum Clearance Level 0
    Maximum Clearance Level 0
    Access to SBOYD's Subsystem Record is Owner Access Only
    SBOYD has 0 ACRs remaining out of an allowed maximum of 0
    User-id has access to the following Application Groups
    Open Session Control
    APPONE UDSSRC
    SBOYD has 0 group(s) remaining out of an allowed maximum of 0
    S U B S Y S T E M I N F O R M A T I O N
    DISALLOW Gates Built by Subsystem to Disable Quantum Timer
    DISALLOW Gates Built by Subsystem to Defer Interrupts
    SBOYD has the Processor Privilege to do the following:
    Read the Executive GRS
    SBOYD has an Access Privilege of ORDINARY
    S E S S I O N C O N T R O L
    Allowed Access to Demand, Batch and TIP Sessions
    Last Session at <NONE> Number of Sessions 0
    Initial Terminal Timeout is the System Standard
    Terminal Timeout may not be changed
    Run Image is System Generated
    For the System Generated Run Image:

    C O N S O L E M O D E
    SBOYD has the following Console Mode capabilities
    Console Mode is NONE
    S E C U R I T Y A C C E S S
    No Access is granted to Privileges or privileged Interfaces

    but when I try to login to demand using sboyd/password I get:

    You have entered an invalid user-id.

    What obvious step have I missed?

    Thanks in advance.

    Steve

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)