Solved

OpenVMS Security

Posted on 2011-02-21
2
695 Views
Last Modified: 2012-05-11
Anyone can help me which command or file can check the following on OpenVMS?
1. How to check the administrator account privilege and file security setting or create file setting?
2. How to check the password expiry date, last change, length, complexity, max and min days?
3. How to check how many way can user connect to the OpenVMS?
4. How to get a list of each accounts, and the status of each?
5. How to check any generic accounts?
6. How to check new accounts will be created with the pre-expired password qualifier?
7. How to check whether the password and username is in procedures?
8. How to see the LGI_BRK_LIM_SYSGEN parameter?
9. What is SYS$WELCOME and SYS$ANNOUNCE?
10. What is DECnet netowrk database and how to check whether it is up-to-date?
0
Comment
Question by:mawingho
2 Comments
 
LVL 39

Accepted Solution

by:
noci earned 500 total points
ID: 34947285
Anyone can help me which command or file can check the following on OpenVMS?
1. How to check the administrator account privilege and file security setting or create file setting?
What is your administrator name?  (System default is SYSTEM) but it can by anyone with the All privilege class:L
MC AUTHORIZE SHOW * /BRIEF will show account with privilege flag.

2. How to check the password expiry date, last change, length, complexity, max and min days?
See MC AUTHORIZE HELP SHOW

3. How to check how many way can user connect to the OpenVMS?
Well basicly: a few:
Direct connection (serial)
Network access (LAT, DECnet, TCP/IP)

4. How to get a list of each accounts, and the status of each?
MC AUTHORIZE ....

5. How to check any generic accounts?
??? what do you mean by Generic Accounts? like SYSTEM/DECnet/??? MC AUTHORIZE

6. How to check new accounts will be created with the pre-expired password qualifier?
Check the DEFAULT account.

7. How to check whether the password and username is in procedures?
Wow, there are too many methods to use passwords from procedures..., in general:
Search for known usernames (MC AUTHORIZE SHOW * /BRIEF) you might find passwords in the neigbourhood.

8. How to see the LGI_BRK_LIM_SYSGEN parameter?
MC SYSGEN SHOW LGI

9. What is SYS$WELCOME and SYS$ANNOUNCE?
Those are logical names that Either hold a message to be printed resp. After & before login.
The might also refer to files if the first character of the string is an @
See:
SHOW LOG SYS$WELCOME
SHOW LOG SYS$ANNOUCE

10. What is DECnet netowrk database and how to check whether it is up-to-date?
The DECNET database is the set of files that describe the DECnet configuration
for DECnet Phase 4 use MC NCP HELP
for DECnet Phase 5 use MC NCL HELP

for more info.
0
 

Author Closing Comment

by:mawingho
ID: 34977034
thank you so much!
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now