🚀 go-pugleaf

Date Entered: 01-25-93 04:14
Does anyone have any information on how OS/2 Advanced LAN version 3.0 
protects the passwords used on the LAN?

1. Password used to sign on from the workstation to the 
server(s)-domain?

    a. Is it transmitted in the clear? If not is the tranmission
    protection trivial or not?
    b.  How is it stored on the domain server, and supplied to other 
    servers?

2. Passwords set up to protect resources on the domain and other 
servers?

    a. Are they stored in the clear, or protected?
    b. If protected, how are they protected? - I know I do not enter a 
    key, so if encryption is used, it is either with a fixed key that 
    is in every copy of the product, or the random number generator is 
    used, and I do not know how robust it is... Has its randomness and 
    cycle time been tested?

So far I've been unable to obtain answers from IBM.  Seems the the 
staff I've dealt with either do not know, or are not willing to let 
security concerned individuals know how good or bad a job they have 
done in this area.  I suspect the former, with an unwillingness to 
find out for me.  Someone at IBM must know - the problem is finding 
that one individual (if he/she is still there, of course).

Thanks to anyone who can supply information, in advance...

Bob

---
   RoseReader 1.70 P001886: This Canadian has an Opinion...His Own!
   RoseMail 2.00 : RoseNet<=>Usenet Gateway : Rose Media 416-733-2285