![]() |
![]() HP OpenVMS Systemsask the wizard |
![]() |
The Question is: Is it possible to use the $CREPRC system service to create a process to run under a different username? I know that I can use SUBMIT/USER to submit a batch job under another users name provided I have CMKRNL privilege. How could I do this using $CREPRC Basically I have a client/server type of application that I needs to start processes on behalf of the user (after they successfully enter their password). I need someway of doing this using $CREPRC with my app either validating their password against the SYSUAF or somehow passing their password along to $CREPRC. The Answer is : Prior to OpenVMS V6.2, the supported mechanisms for creating a process running under a UIC context other than the process creator included the DCL RUN/UIC (process) command, the $CREPRC system service with the UIC argument specified, DECnet task-to-task, and SUBMIT/USER. The latter two mechanisms are two of the few (supported) mechanisms that allow the specification of the target username -- most other mechanisms alter the process UIC. As of OpenVMS V6.2, you can use the $PERSONA* system services to take on the persona of another user -- in a controlled fashion. While the process is operatign under the target persona, a $CREPRC call will create new processes under the username of the assumed persona. The general steps are: $PERSONA_CREATE of target user $PERSONA_ASSUME target user $CREPRC $PERSONA_ASSUME revert to original $PRESONA_DELETE clean up For details on these systems services, please see the OpenVMS System Services Reference Manual for details (V7.1 and later). Prior to this release, see the V6.2 New Features Manual for details on these calls. For information on DECnet task-to-task, see previous discussions here, as well as the DECnet manuals in the OpenVMS documentation set. There are several software packages available from various sources that could be of interest, including WHEEL and CEREBUS (if memory serves). See what DECUS (http://www.decus.org/) has to offer in this area.
|