[comp.os.vms] PSI Authorize

XBR1Y028@DDATHD21.BITNET.UUCP (06/07/87)

We are running VAX-PSI on one of our VAXen. Since we are a university with
many cooperations at other installations, we like to privide an access to
our VAX (via Psi) for everyone without having to apply for it.
On the other hand we try to keep non-authorized users (mainly students) of
our university away from PSI to avoid high costs for communication and the
worry about - who will pay the students communications bill !

So we decided to use the security features in PSIAUTHORIZE to do that for us.

We have tried different settings without any success. Here one combination
that looked o.k. for me:

 SET DTE ALL /ACL=(ID=PSI_OUT,ACCESS=OUTGOING) /NET=networkname
 SET DTE ALL /ACL=(ID=PSI_IN,ACCESS=INCOMING) /NET=networkname

ID's PSI_IN and PSI_OUT were granted to anyone who is allowed to use PSI.

the first setting (PSI_OUT) keeps non-authorized university users from dialing
out - but with -/ or without the second setting (PSI_IN) (plus the first setting
)
you can no longer access our PSI-address (DTE-Number) from the outside world!

My colleague contacted our TSC yesterday - but they were not able to clarify
this problem and provide a solution - maybe next week...?

So I decided to ask you out there for any hints and tips. Since I had success
on several occasions by asking VAX-Info list, I do it agian.

Thanks in advance for your help,

Walter
Reichenbaecher
System Manager , University Computing Center
Technical University Darmstadt, West Germany
Bitnet:  XBR1Y028@DDATHD21
Arpanet: XBR1Y028%DDATHD21@WISCVM.WISC.EDU
_______________________________________________________________________________