Melinda says:
> I'm just setting up ADSM.  I would prefer to allow open registration, as
> that would be more convenient for the users and less work to administer.
> However, this server will have TCP/IP access and I can see nothing that
> would prevent anyone anywhere on the Internet from using (or abusing) it
> if I allow open registration.  I hope someone can convince me that that
> isn't so.

It won't be me trying to convince you.  It appears you can control
scheduled backups because scheduled backups are only done after an
administrator's "DEFINE ASSOCIATION" command.

When users register during "open registration", they are assigned to
the STANDARD policy domain.  If you don't have a STANDARD, then
(perhaps) open registration is useless.  I know of no exit to control
who is allowed to register.

How would you have "open registration work?

If you notice me use your "open registration" server, you can "LOCK
NODE" me out, but I can probably throw a lot of data at you before
that.  It's easy enough after the fact to get a list of registered
nodes, but that's probably not enough if you're on the internet
(especially when it appears any JoeUser can get client software from
the IBM anonymous FTP site).

cheers,

cheers,

Wayne T. Smith
Systems Group -- CAPS        internet: wts AT maine.maine DOT edu
University of Maine System   BITNET/CREN: WTS@MAINE