HP OpenVMS Systems

Security and Password Verification?

» close window

The Question is:

 
Where and how do I list the pwd.h file
Ineed to map the pwd.h to validate users for a specific routine
 

The Answer is :

 
  Use the $acm system service, or -- better -- use standard OpenVMS
  system security attributes including security identifiers or such.
 
  Verifying a password directly can introduce security problems,
  permitting security attacks and (if not implmenetned entirely
  correctly) bypassing standard security defenses including auditing
  and evasion.
 
  The OpenVMS Wizard would recommend review of the security manual,
  and would generally avoid directly verifying the password within
  an application.

  

     

     
answer written or last revised on ( 28-OCT-2004 )
     
» close window