Re: Newbie questions about Advanced Server

From: Brad McCusker (brad.mccuskerNOSP_at_Mhp.com)
Date: 11/25/04 

Date: Thu, 25 Nov 2004 00:54:16 -0500

Some quick responses to try to get you moving....

"Michael O'Connor" <michael.o'connor@bluescopesteel.com> wrote in message
news:9865a1d6.0411241757.152ec2b1@posting.google.com...
> What I really want to do is use Microsoft Visual C++ on a Windows 2000
> PC to edit C source files that reside on an Alpha. Until now, I have
> FTP'ed the files between PC and Alpha, but that is such a pain that I
> am now trying to use Advanced Server (Pathworks).
>
> I have installed Advanced Server V7.3A on an Alpha running OpenVMS
> 7.3-2, with "Advanced Server and OpenVMS" as the security model, and

My Advanced Server seminars used to teach people that only those with the
tightest security concerns, and a prior OpenVMS security implimentation,
need to use VMS and Advanced Server model. Advanced Server security should
be sufficent.

> the following configuration:
>
> 1. Run the License Server: NO
> 2. Enable Timesource service: NO
> 3. Enable Alerter service: NO
> 4. Enable Netlogon service: YES
> 5. Advanced Server domain: MY_DOMAIN
> 6. Advanced Server role: PRIMARY
> 7. Advanced Server computer name: MY_NODE
> 8. Server announce comment: Advanced Server V7.3A for OpenVMS
> 9. Advanced Server language: English (USA)
> 10. Enable NT style printing: NO
>

Everything there looks good. You even got the license server part correct,
which most 'newbies' get wrong.

> With Advanced Server running, I created a local user "USER1" (the same
> user name as my VMS account), and created a share on some directories
> with the options /NOPERMISSIONS/PERMISSIONS=(USER1=FULL). Logging into
> Windows as the the user "USER1", I can access the share, and can open
> files, but cannot save them - the Windows error is:
>
> "Cannot access this file.
> Check security privileges over the network."
>

You've told me what the file permissions are from the Advanced Server point
of view, but, not from the VMS point of view. From VMS, who owns the files,
and what are the file permissions? Then, you need to make sure that the
Advanced Server user "USER1" really does map to VMS "USER1" (or some VMS
user that in fact has VMS access to the file). I don't recall if that
should happen by default or not, but, you can force the issue with a command
"$ ADMINISTER ADD HOSTMAP ...". There is also some lanman.ini/registry
parameters to control some of the deafult mappings such as when the networks
username matches the VMS user name, but, I don't recall the exact parameters
right now.

> If I change the security model to "Advanced Server" only, I can save
> and create files. Why is this, and do I need to worry about it from a
> security point of view?
>

See above, and, I don't think you need to worry about it. But, that depends
on your security needs in your environemnt. Hopefully I've given you enough
information to figure this out.

The point of my "don't need to use AS and VMS mode" statement is that if you
choose that mode, you need to worry about two levels of security, all the
time. Your statement above only considers one level (AS).

(Actually, there is 3 levels. You didn't mention the share level
permissions, but, by default they are wide open)

> Another question - when a file is edited and saved from the Windows
> end, it retains its original version number on the OpenVMS file
> system, and the "date modified" attribute of the file is updated. I
> would much prefer it if a new version was created, as happens when the
> file is edited and saved in OpenVMS. Can I change this behaviour?

Not from Advanced Server's point of view. Maybe someone else knows a trick
to effect the same behavior?

> Also, is there any way to see the different versions of a file from
> the Windows end?

File versions in Windows? Nope.

>
> While I'm at it, I vaguely recall hearing that there is some kind of
> DEC C "add-in" for Microsoft Visual C++. Does anyone know where I
> could find some information about this product?

Its called Enterprise Toolkit for VMS. Sounds like it might be a good match
for you. See http://h71000.www7.hp.com/commercial/et/et_index.html

Regards,

Brad McCusker
Transition Engineering and Consulting
HP
Nashua NH USA
(former Advanced Server Engineering Project Leader)

Relevant Pages

  • Re: Newbie questions about Advanced Server
    ... > My Advanced Server seminars used to teach people that only those with the ... > tightest security concerns, and a prior OpenVMS security implimentation, ... > need to use VMS and Advanced Server model. ...
    (comp.os.vms)
  • Re: OpenVMS security?
    ... OpenVMS is mostly written in a variety of type-safe languages, ... He is a security expert - ... The VMS kernel is mostly a DEC language claled BLISS and VAX Assembler. ... Getting privileges you don't have is ...
    (comp.os.vms)
  • Re: How to turn linux into VMS - memory refresher for Dave ...
    ... I am simply trying to find out if security in VMS is ... > superior by design when compared to *x. ... Most of UNIX ... Most of VMS was not implemented in C, ...
    (comp.os.vms)
  • Re: The Register: OpenVMS among most-secure of operating systems
    ... >> ahead of VMS for vunerabilities. ... > I have SSH on my VMS system. ... > any sort of security or DoS danger because of SSH. ... > should have been reported to CERT (if CERT was to be used as a valid ...
    (comp.os.vms)
  • Re: Loose Cannon-dian
    ... claims about the state of security in an OS you're still learning? ... I'm sure the people trying to break VMS ... Take the format string bugs in finger, ... OS complexity is often a result of poor design. ...
    (comp.os.vms)