| openqm début | |
| qu'
est ce qu' openqm ? qu'est ce que les sources ouverts ? qu'est qu'il y a de neuf dans les maj récentes ? applications et outils de développement contactez-nous
security issues
|
security issues
how do i set up a user name and password?
this all depends on what operating system you are using and how you connect to your qm server....
windows 95, 98, me
these versions of windows do not include an adequate user authentication mechanism for qm so we implement our own. user names and an initial password are created using either the create.user or admin.user commands. users connecting via a telnet style connection will be prompted for authentication. users of qmconsole on the server itself are assumed already to have passed authentication and will not require to enter a user name.
some users of windows 95, 98 and me do not want user authentication. the security command can be used by system administrators to turn off authentication.
windows nt, 2000, xp
these versions of windows include comprehensive user authentication features and users connecting to qm via a telnet style connection will need to enter a user name and password that are known to windows. these are created using the user administration functions of the windows control panel. the user's qm process runs as the selected user and will have the access rights appropriate to that user.
users of qmconsole must already have been authenticated when they started the windows system and hence do not need to re-enter the authentication data.
because qm needs to create the user's process as the selected user, it is not possible to turn off user authentication on these systems.
there may be times when system administrators do not want all users who have valid windows user names to be able to use qm. this can be achieved by using the security command to activate qm's own security system. once this is enabled, only users who are also registered for qm using the create.user or admin.user commands will be allowed to start qm processes.
regardless of the windows platform in use, qm maintains a central register of user names in a file with restricted access. this file enables administrators to specify that a particular user is to be taken directly to a specific account rather than entering the account name at a prompt. individual users can also be granted administrator rights which allow them to use restricted features such as the user management tools..
linux, freebsd
these operating systems include full user authentication and users connecting directly to qm via a telnet style connection will need to enter a user name and password that are known to the operating system. these are created using standard operating system utilities. the user's qm process runs as the selected user and will have the access rights appropriate to that user.
users entering qm from a linux or freebsd command prompt must already have been authenticated when they logged in and hence do not need to re-enter the authentication data.
because qm needs to create the user's process as the selected user, it is not possible to turn off user authentication on these systems.
there may be times when system administrators do not want all users who have valid operating system user names to be able to use qm. this can be achieved by using the security command to activate qm's own security system. once this is enabled, only users who are also registered for qm using the create.user or admin.user commands will be allowed to start qm processes.
who can execute system administration commands?
for obvious reasons, the user management commands referenced above must be restricted to users who are considered to be system administrators. some commands also can only be executed from the qmsys account.
a user is an administrator if any of...
1. they are defined as an administrator on windows nt, 2000 or xp.
2. they are executing with user id 0 (root) on linux or freebsd.
3. they are using qmconsole on a windows system.
4. they are running as a user defined as an administrator using admin.user
|