Thanks Andy,

Glad to see IBM responding....

My question has to do with trying to beef up the security with our TSM
clients (expiring passwords)....... What does IBM have to say about what
seems to be VERY lame password management?

In the age of security, I am amazed at how weak the admin and client
password schemes are implemented.....

Keith




----- Original Message -----
From: "Andrew Raibeck" <storman AT US.IBM DOT COM>
To: <ADSM-L AT VM.MARIST DOT EDU>
Sent: Thursday, September 12, 2002 12:27 PM
Subject: Re: Can you set "passwordaccess generate" from a client option set
on the server?


> This would be rather difficult to do, since in order to get your client
> options set, you need to authenticate with the server. To authenticate
> with the server, you need to send the password to the server. Since the
> method the client uses to send the password to the server is based on the
> PASSWORDACCESS setting, it is not possible to send the password without
> knowing the PASSWORDACCESS setting; and you couldn't possibly get the
> PASSWORDACCESS setting from the server without first sending the password.
> So it has to come from the local client options setting.
>
> Similarly, it isn't possible to use a client options set to define options
> like TCPSERVERADDRESS, COMMMETHOD, NODENAME, etc.
>
> Regards,
>
> Andy
>
> Andy Raibeck
> IBM Software Group
> Tivoli Storage Manager Client Development
> Internal Notes e-mail: Andrew Raibeck/Tucson/IBM@IBMUS
> Internet e-mail: storman AT us.eyebm DOT com (change eye to i to reply)
>
> The only dumb question is the one that goes unasked.
> The command line is your friend.
> "Good enough" is the enemy of excellence.
>
>
>
>
> Keith Kwiatek <kkwiatek AT NIST DOT GOV>
> Sent by: "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>
> 09/12/2002 08:27
> Please respond to "ADSM: Dist Stor Manager"
>
>
>         To:     ADSM-L AT VM.MARIST DOT EDU
>         cc:
>         Subject:        Can you set "passwordaccess generate" from a
client option set on the
> server?
>
>
>
> Hello,
>
> Can you set "passwordaccess generate" from a client option set on the
> server?  How? Doesn't seem to be a selection in the client option set
> menu....
>
> THanks
> Keith