HDTenEightyP/NetNews huggingface dataset:
Organization: The Wizzard's Cave, East Meadow, NY
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 17:03:27 EST
From:         Jon Freivald <jaflrn!jaf@UUNET.UU.NET>
Subject: Re: Security risks.

Bent=Tranberg%Data%AID%BAN.AID.NO@vm1.cc.uakron.edu writes:

> I always thought you had to give your old password if you wanted to change
> it. Not so! Anyone with access to your logged in PC may change your password
> without knowing your old password, and then log in on another PC later.
> Simply run MUSER rather than PASSWORD to change password. How long has it
> been like this without anyone noticing, or is it just me?
>
> Please, don't tell me I can protect MUSER. What I would like is that Banyan
> changes this as soon as possible. A user that is not an administrator should
> not be allowed to change password without giving the old, no matter what.
> The mechanism that checks your old password must be in the server, if it is
> to be safe. Otherwise anyone can do whatever MUSER is doing wrong.

[ stuff about Unix deleted... ]

> I do not believe that VINES is fooled that easily, but I would appreciate it
> if someone would care to enlighten us about the security in Banyan VINES.
> Just how much can we trust it, and what risks are there? Is there written
> documentation somewhere about this, except for the manuals? Why aren't the
> information encrypted in the ethernet cables? How can we prevent fake login
> programs from stealing passwords? ( I have been doing quite a lot about that
> since last I mentioned the problem ) How is security on the new Unix-platform

You can only use the Change Password feature of MUSER if you are in the
AdminList of the same group as the user who's password you are trying to
change.  Surely you don't have all your users on the AdminList for their
groups!?  Obviously the administrators need a mechanism to reset a
password for a user who has forgotten his - this is the purpose of
MUSER, just as on a Unix system "passwd user_name" when logged in as
root will not ask for the current password...  The thing that must be
stressed to your administrators is that there is a real, serious need
for them to log out from their PC's when they leave the area!!!  Also,
it is much better to have one account for normal work and annother for
administration.

As for the password info being encrypted, I have been told by folks at
Banyan that the password information is in fact encrypted at the
workstation before being sent accross the net to the server.  [Please
don't ask who told me - this was almost 4 years ago & I don't remember!
Also, if anyone has information to the contrary, I'd like to hear it.]

Jon

=============================================================================
                   Jon Freivald ( jaflrn!jaf@uunet.UU.NET )
         Nothing is impossible for the man who doesn't have to do it.
=============================================================================
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
X-Organization: SUAA bv - Informatiesystemen in het Hoger Onderwijs en Onderzoek
X-Envelope-to: BANYAN-L@VM1.CC.UAKRON.EDU
X-VMS-To: IN%"BANYAN-L@VM1.CC.UAKRON.EDU"
Newsgroups: bit.listserv.banyan-l
Date:         Thu, 19 Nov 1992 18:33:00 +0100
From:         Dirk Udo - ICP SUAA bv <SYSOPER@SUAA.NL>
Subject: RE: PC Dial-in

Hi, the whole bunch is on there vac's. So no mail today please!!

Bye.
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 16:33:00 PST
From:         DLJ2%Elec%EnconBenicia@CTS27.CS.PGE.COM
Subject:      re: Security risks.

Bent is correct!  You can change the password of the user from the workstation
they are currently logged in at using MUSER, without being prompted for the
current password.  This may be something that is version specific, but in
4.11(5) you definately can change the password.

You should try it if you don't believe it.  Login using your own non-admin ID
and see what happens.

------------------------------------------------------------------------------
Doug Johnson                              internet id: dlj2@encon.pge.com
Network Specialist                          banyan id: dlj2@elec@enconbenicia
3909 Park Road
Benicia, CA 94510
(707) 746-4512
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Tue, 24 Nov 1992 08:52:20 +1100
From:         Paul White <pdw@MELB.BULL.OZ.AU>
Subject:      re: Quality Replies

Bonjour,

I received your message, but my French is not good enough to reply as I would
like!  I work for Bull in Melbourne, Australia, and support LAN and WAN systems
including Vines.

Regards,

Paul White.
From: SSWGATE=CLBRASC1%MQG1@MQG1.USMC.MIL
Newsgroups: bit.listserv.banyan-l
Subject: NO SUBJECT
Date: 17 Nov 92 10:56:05 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

To:            sswgate@clbrasc1@servers[ddn.s00305]
Cc:
Bcc:
From:          SNADS Gateway/Banyan Mail
Subject:       Undeliverable Message
Date:          Tuesday, November 17, 1992 at 3:14:24 am EST
Attach:
Certify:       N

---------------------------- [Message Follows] ---------------------------------


To:            SSWGATE@CLBRASC1@Servers[CLBGRP17.CFISAD]
Cc:
Subject:       re: Banyan versus Novell

Message not delivered to recipients below.  Press F1 for help with VNM
error codes.

        VNM3036:  CFISAD@CLBGRP17@servers[ddn.s00305]


---------------------------- [Message Follows] ---------------------------------


Enclosure: Memo Text
Format: PC Data File
From: MGREEN%MQG1.USMC.MIL@MQG1.USMC.MIL
Newsgroups: bit.listserv.banyan-l
Subject: NO SUBJECT
Date: 19 Nov 92 03:05:00 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

To:            sswgate@okrmcb_wan1@servers[ddn.s00305]
Cc:
Bcc:
From:          ISMO OFFICER@G6@3D MARDIV
Subject:       re: PC Dial-in
Date:          Thursday, November 19, 1992 at 7:37:56 am JST
Attach:
Certify:       N

---------------------------- [Message Follows] ---------------------------------


Susan,

We use the PC Dial in feature extensively.  We have a variety of cloan
notebook type computers that dial in from around the world via foreign
telephone systems.  We have not had any problems.  We are currently
running at 4.11(5).  I suggest that you talk to your VAR for assistance.

-----------------------------------------------------------------------
Matthew Green
Captain, USMC
Okinawa Japan
From: coates@UMUC.UMD.EDU (Elliott Coates)
Newsgroups: bit.listserv.banyan-l
Subject: RE: PC Dial-in
Date: 18 Nov 92 22:06:50 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

>I am curious about folks using PC Dial-in.  We have a dial-in service but it
>is useful locally only.  Users who are "down-state" and try to dial in to the
>PC Dial-in get returned to the DOS prompt after the continuing....

>Yet these same people are able to dial-in to our campus' main dial-in for
>mainframe connections...the phone lines check out ok...but it just seems that
>the Banyan dial-in can't handle long distance-type calls.

Check 'Restrict access', 'Restrict Dial-in Users' under 'Operate'.

 ------------------------------------------------------------------------------
 |                       Elliott Coates, washington dc                        |
 |               coates@umuc.umd.edu         coates@umuc.bitnet               |
 ------------------------------------------------------------------------------
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Wed, 18 Nov 1992 21:13:47 PST
From:         Gerald=Langiewicz%Staff%SS-GradLab@PHOBIA.SS.UCI.EDU
Subject:      re: Mac Software

Thanks to those who responded. It is funny how thing work. Today (Wednesday)
I received 1.3b6 from my VAR.  As far as I can tell, the problem with the
date is fixed.  The real test will come when I install the new version on the
remaining MACs.

I am still having a problem getting a MAC II to work.  I will work on it more
Thursday.

gerald
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Wed, 18 Nov 1992 14:54:46 EDT
From:         Steve=Skilbeck%Economics%UNIMELB@MUWAYE.UNIMELB.EDU.AU
Subject:      Printing Solutions?

Hi,

Just thought I'd quiz the list for some ideas on a printing solution.

We have a HP Laserjet III with a postscript cartridge that is networked for
our PC Users, there is a couple of Mac users who would also like to use this
printer.  Is there anyway this can be done via the network?  Is the solution
purely software, or is a hardware card needed for the HPIII?

If anyway has connected up Macs via Banyan to a HP III or similiar could give
me some advise here, I'd be very grateful.


Stephen Skilbeck
S.Skilbeck@Economics.unimelb.edu.au
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 09:46:54 PST
From:         C.=Hanley%IM%SPK@BANYAN.USACE.MIL
Subject:      re: Networked CD-ROMs

The two companies that we've been looking at are Meridian Data and Online
Systems.

Meridian Data   (CD-NET)
5615 Scotts Valley Drive
Scotts Valley, CA  95066
408-438-3100  800-767-2537 408-438-6816 (fax)

Online Systems (Optinet)
20251 Century Blvd
Germantown, MD  20874
301-428-3700, 301-428-2903 (fax)

I've gotten good feedback regarding Meridian Data's CD-NET product from a few
Vines admins.  One nice touch they have is a configurable menu system.  If you
remove a cd-rom from a drive in your system, it will automatically remove that
option from the menu for you.  They have a turnkey setup that is a 386 PC
loaded with RAM and 14 or 28 cd-rom drives in an enclosed system.  Pretty nice.

Online's Optinet is also a good choice.  Biggest advantage: removable Optinet
device drivers and MS CD-ROM extensions that can be loaded and unloaded from
memory.

Both products use NETBIOS.  If you went with Meridian, Performance Technology
is coming out with a removable netbios product this month.

There is also Trellis Redirector, but this product seems to work best for
the smaller application, not an application that requires many cd-rom drives
online at once.

================================
Carolyn Hanley
U.S. Army Corps of Engineers
916-557-7035
chanley@usace.mil
==============================
From: drawding@wang.com (Dave Rawding)
Newsgroups: bit.listserv.banyan-l
Subject: Banyan, Unix, Novell packet drivers
Summary: Currently we are doing Unix and Novell together, want to add Banyan
Keywords: packet drivers, Novell, Unix
Date: 19 Nov 92 13:23:51 GMT
Organization: Wang Labs, Lowell MA, USA

We are currently able to access SCO Unix and Novell via packet drivers through our 3c503 cards.  Does anyone have experience adding Banyan as well to the     setup? The closest we have come is to use the tsrcom package that allows us to go back and forth between Banyan and the Novell/Unix setup.
From: REB100@PSUVM.BITNET
Newsgroups: bit.listserv.banyan-l
Subject: Re: PC Dial-in
Date: 18 Nov 92 20:54:00 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
              18 Nov 1992 09:04:40 CST

Susan,

I have people here who have used PC-Dial in bot locally and long-distance.
They have never had the problem you've described.  Long-distance has been
from Delaware to Pennsylvania.

We have Hayes modems on the server.  The notebooks that dial in typically
utilize the clone manufacture's modems that accept the Hayes command set.
Haven't seen any problems.

Sorry I can't be of any help.  We did alter the PC-Dialin script to
accomodate the error correction the clone modems have built in, but other
than that...

Try contacting your VAR and have them open a problem report with Banyan.

Bob
/===================================================================\
| Robert E. Brydia                           REB100@PSUVM.PSU.EDU   |
| Research Assistant                            (814) 863-7506      |
|       "Knowledge was meant to be shared" - Louis L'Amour          |
\===================================================================/
From: HLP1%ItsLsc%CTS@CTS27.CS.PGE.COM
Newsgroups: bit.listserv.banyan-l
Subject: re: Mac Software
Date: 18 Nov 92 16:35:51 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

Gerald,

The current version that is released from Banyan, as far as we are aware is
1.2.  I am pretty sure that there is a newer version that is being worked on,
1.3, but doesn't seem to be released.

Herb Patten
PG&E
hlp1@cs.pge.com
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Transport-Options: /STANDARD/RETURN
Content-Type: text
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 16:38:29 GMT
From:         idrc/G=David/S=Dores/O=IDRC_CRDI/OU=EDP_TED@MHS.ATTMAIL.COM
Subject:      re: Networked CD-ROMs

Patrick,

Just out of curiosity, what kind of memory requirements does this Vines-IP
CDROM stuff have?


David Dores
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 10:24:59 PST
From:         LTB2%CompSvcs%ENCON@ENCON01.ENCON.PGE.COM
Subject:      Networked CD-ROMs

---------------------------------------------------------------------------
Is anyone currently using a product called CDNet?  It's supposed to allow you
to hang CD players off a workstation and allow any user on the network to
access it.  I believe the company that developed the software is called
Meridian; but i haven't been able to find a number for them.  Anyone know
where i can reach them?

What i'd really like to do is be able to have a PC based service running a
couple of CD readers so all users can have access to those CDs.  Anyone know a
company that markets or develops that type of software?

Thanks in advance...

--------------------------------------------------------------------------
Rick L. Perales
U. Texas Medical School                 phone   : 713-792-5259
6431 Fannin  Suite 2.112                fax     : 713-794-4242
Houston, TX 77030                       Internet: rlp@fpcm.med.uth.tmc.edu
--------------------------------------------------------------------------

Rick,

I have just finished setting up a CD player on a workstation just like you
described.  The name of the system is OPTI-NET by On-Line Computer Systems,
Inc.  They are located in Germantown, MD and their sales number is
(800)922-9204 or (301) 428-3700.

The setup was fairly simple and so far, works great.  It is setup on NetBIOS
and looks good.

--------------------------------------------------------------------------
Lane T. Boolen
Pacific Gas & Electric                  phone   : 916-386-5235
5555 Floring Perkins, Room 133
Sacramento, CA                          Internet: ltb2@encon.pge.com
--------------------------------------------------------------------------
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
X-Envelope-to: banyan-l@AKRONVM.BITNET
X-VMS-To: BAN-L
X-VMS-Cc: SURF441
Newsgroups: bit.listserv.banyan-l
Date:         Fri, 20 Nov 1992 17:02:00 +0100
Comments:     This message was sent with PMDF 4.0
Comments:     Warning -- original Sender: tag was SURF441@KUB.NL
From:         ic@SVO.NL
Subject:      Re: WINQVT NET ON BANYAN

David Bartholow writes:
/
/   Has anyone out there had any success at getting WinQVT NET to work
/on a Banyan network (using ARCNET)?. I've tried very hard but have had
/no success. I have not had any success at contacting the people who sell
/this product either (their phone has been disconnected and they don't seem
/to be answering their mail). Any suggestions on how to make this work would
/be appreciated.

David,

I have had no succes at all running winqvt, running vines 4.11 (5)
and using ARCnet.
Try Microlink instead, it works quite nice.

Jelle Hoogland,
ic@svo.nl
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Wed, 18 Nov 1992 13:36:37 -0500
From:         ROBERT.REESE@SPRINT.SPRINT.COM
Subject:      ESDI Caching controller for Everex

 <"CGJC-4685-6925/27"*/PN=ROBERT.REESE/O=US.SPRINT/ADMD=TELEMAIL/C=US/@sprint.co
 m>


Duane Foster@um.cc.umich.edu
>Can anyone recommend a good ESDI controller for an use in an Server, Everex
>Step machine, preferable one with a cache.

I know that the ESDI caching controllers offered by DPT work well in Everex
Step computers for several UNIX/XENIX environments so I would assume they
would work fine with VINES.

The DPT3011/75 is an ESDI controller for ISA machines.  It has a floppy
controller and comes with a 512k cache.  You can add a daughter board
(MM401X-4) that attaches to the controller and adds 4 meg to the cache for a
total of 4.5 meg.  If you need more cache you can add another card (MM401X-4)
that provides an additional 4 meg for a total of 8.5 meg.  This extra card
takes up another slot.  If you need more than 8.5 meg, two of the daughter
boards can be added to the MM401X-4 to provide a total cache of 16.5 meg.

If you are starting from scratch I would recommend using SCSI drives and
controllers.

Regards,

Bob Reese
E-Mail - /PN=ROBERT.REESE/O=US.SPRINT/ADMD=TELEMAIL/C=US/@sprint.com
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Tue, 17 Nov 1992 07:50:14 EST
Comments:     Converted from PROFS to RFC822 format by PUMP V2.2X
From:         "Mike Christiansen - Network Coordinator" <MCHRIST@FCCJ.BITNET>
Subject:      WP on VINES

       MCCS 270

Fred, I also ran into this problem a couple of years back. We have several
hundred systems in our computer labs and we were having problems with students
messing up the defaults. They way I got around if was to create a backup
directory for the SET files and then each time the student selects WordPerfect
off of the menu I copy the backup SET file over the active SET file. This way
ever time WordPerfect is started the student does have the right configs. By
using this method you can SET the backup set file(s) to read only. Hope this
helps. Bye !!!

Mike Christiansen
Florida Community College at Jacksonville

If you have any questions please call (904) 632-3192
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 11:02:12 CST
From:         Rick=L.=Perales%2nd=Fl%FPCM@FPCM.MED.UTH.TMC.EDU
Subject:      Networked CD-ROMs

Is anyone currently using a product called CDNet?  It's supposed to allow you
to hang CD players off a workstation and allow any user on the network to
access it.  I believe the company that developed the software is called
Meridian; but i haven't been able to find a number for them.  Anyone know
where i can reach them?

What i'd really like to do is be able to have a PC based service running a
couple of CD readers so all users can have access to those CDs.  Anyone know a
company that markets or develops that type of software?

Thanks in advance...

--------------------------------------------------------------------------
Rick L. Perales
U. Texas Medical School                 phone   : 713-792-5259
6431 Fannin  Suite 2.112                fax     : 713-794-4242
Houston, TX 77030                       Internet: rlp@fpcm.med.uth.tmc.edu
--------------------------------------------------------------------------
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Tue, 17 Nov 1992 11:50:47 EST
From:         R=Stoll%SysAdmin%7CG@LGGATE2.HQ.AF.MIL
Subject:      re: Novell/CSUS

Mary=France%RIS%CHI%ALOHA.CHI.OHIO-STATE.EDU@VM1.CC.UAKRON.EDU Wrote:
|
|
| Will the study be posted on CSUS?
|
|
| I have tried to telnet in to CSUS to pick up some of the
| postings... maybe I
| am missing something ...
|
| Can I have the address and login one more time?... please!!
|
| Thanks
|
| Mary France
| RIS SPECIALIST
| Children's Hospital Research Foundation
| Mafrance@magnus.acs.ohio-state.edu


You can't telnet to it.  You need to use FTP.

Login: anonymous
Password: Your e-mail address



SSgt Robert Stoll
7th Communications Group
The Pentagon

rstoll@lggate2.hq.af.mil
From: JAMES=NEARING%50%WPNSTAC@FS.NWSCON.SEA06.NAVY.MIL
Newsgroups: bit.listserv.banyan-l
Subject: re: Exabyte drive
Date: 17 Nov 92 18:37:39 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

Robert,
   You set it up as SCSI device 6.  Then when you boot up the CNS, run
system diagnostics and configure SCSI devices to add the new SCSI device.
It is a little hard to do without the instructions.

If you give me your fax #, I will go dig up the docs and fax them to you.
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 15:31:54 AUS
From:         Brian=Tehan%CC.staff%Swinburne@BUSTER.CC.SWIN.EDU.AU
Subject:      re: 4.11 on a PS2/95

"I am trying to install 4.11(0) on a brand new ps2/95 with two SCSI disks.
After booting from the install/utility disk and selecting the option to
prepare all disk space for vines I see the following warnings:

WARNING:  HD warning:  reading drive 0

WARNING:  sector 0x00000001

WARNING:  General error

WARNING:  Succeeded after 1 retries

Then the surface analysis continues and the load proceeds.  Both disks are
brand new.  One is a 400mb and the other is a 320 mb (both IBM).  I have
switched the disks and tried both and get the same thing.  I formatted both
disks using the format utility to make sure they were "clean".  I formatted
both the disks using the DOS format utility prior to a vines load to get rid
of the problem but to no avail.  I chose the repair disk 1 option from the
install disk and let it rework the disk prior to preparing all disk space for
vines but still the error message persists.  This is a supported platform so
I'm hoping someone else has seen this problem and might give me a clue.  I've
also built up the system as a dos box and ran it through all the ibm diags and
found nothing wrong.  The scsi controller has 512K cache if that makes any
difference.

Any help would be appreciated.

Thanks
Keith Lally."


        We have been using a PS/2 model 95 for about 2 years as an occasional
server (when we run Banyan courses for a VAR). It has always come up with the
above message but has always run very well - never crashed or anything nasty.
I assumed that there was something slight incompatibility between the IBM
SCSI disk setup and the kernel which caused this message but have never
worried about it as we use it for running OS/2 as well and don't see the same
problem.
        Maybe someone from Banyan can enlighten you about the cause of the
message but be assured that it only occurs at boot time.


-----------------------------------------------------------------------
Brian Tehan                             Email: brian@banyan.swin.edu.au
Data Communications                     Tel: 061-3-819 8813
Swinburne University of Technology      Fax: 061-3-819 8944
Melbourne, Australia
-----------------------------------------------------------------------
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.banyan-l
Date:         Mon, 23 Nov 1992 17:10:50 PST
From:         MA=Crist%Info_Sys%STG_IS@DSO3.DSD.TRW.COM
Subject: re:Re: Security risks.

Sorry Steve,

I'll have to disagree with you on that one.  I just tried my test account
with 4.11(5) client software against a 4.11(5)SMP server.  It don't work.  I
even tried creating a new test account.  Still says "Sorry, you are not an
administrator for Group@Org".  It will let you change your own password if
the admin hasn't disabled that capability.  I don't think we were contending
that issue earlier.

Mike Crist
TRW
Newsgroups: bit.listserv.banyan-l