Additional paths may be configured as required. This applies to all authentication sources. Using VMS identifiers is a far better solution. See previous section. See 11.4 - Authorization Sources .
Simple lists contain usernames and unencrypted passwords.
These are plain-text files, created and modified using any desired editor. Lists are more useful when grouping names together for specifying which group may do what to where. HTA databases are WASD-specific, binary repositories of usernames, encrypted passwords, capabilities, user and other detail. External agents are authentication and authorization scripts executed on demand, under the control-of but external to the server. It is possible for a site to write it's own, custom authorization agent.