[Info-vax] login information capture

[Keith Cayemberg]

On Wednesday, February 19, 2014 3:36:25 PM UTC+1, Joukj wrote:
> Stephen Hoffman wrote:
> 
> > On 2014-02-18 14:59:18 +0000, pcoviello at gmail.com said:
> 
> > 
> 
> >> we would like to be able to look at a file and see who has logged in 
> 
> >> from a vendor site using a generic account.  we would be looking for 
> 
> >> something  where the support person has to put in their name and 
> 
> >> reason for being there, I'm hoping someone has done this already.
> 
> > 
> 
> > Mark the login as RESTRICTED (to prevent bypassing the prompt) and use 
> 
> > READ/PROMPT="Why are you here today? " in the LOGIN.COM, and append it 
> 
> > to a text file, or mail it to a recipient.    If you wanted to get 
> 
> > fancy, conditionalize the prompt to display only when in INTERACTIVE 
> 
> > mode, and not in NETWORK, BATCH or OTHER.
> 
> > 
> 
> > Here you go:
> 
> > 
> 
> > $ if f$mode() .eqs. "INTERACTIVE"
> 
> > $ then
> 
> > $   read/prompt="Why are you here? " sys$command reason
> 
> > $   pipe (write sys$output "Reason specified: " + reason ; show 
> 
> > logical/job sys$rem* ) | mail/subj="Vendor login notification" SYS$PIPE: 
> 
> > VMSUSERTONOTIFY
> 
> > $ endif
> 
> > 
> 
> > 
> 
> > 
> 
> I normally use INQUIRE instead of READ/PROMPT
> 
> Are there advantages/disadvantages for either of the methods?

Because INQUIRE allows in text symbol/logical substitution, it is long known to be comparatively insecure to READ, especially if used in captive/restricted gate-keeping procedures.

The following is taken from the DCL Dictionary...
http://h71000.www7.hp.com/doc/83final/9996/9996pro_132.html
Note that you can also use the READ command to obtain data interactively from the terminal. The READ command accepts data exactly as the user types it; characters are not automatically converted to uppercase and spaces are not compressed. However, symbols and lexical functions will not be translated even if you use apostrophes to request symbol substitution. 

Cheers!

Keith Cayemberg