Path: utzoo!utgpu!water!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!mailrus!cornell!rochester!kodak!scotty!root
From: root@scotty.UUCP (Don Cox)
Newsgroups: comp.unix.questions
Subject: Security from outside call-ins
Message-ID: <262@scotty.UUCP>
Date: 18 Jul 88 13:03:05 GMT
Reply-To: root@scotty.UUCP (Don Cox)
Distribution: na
Organization: Systems Integration, Eastman Kodak Co, Rochester, NY
Lines: 25

I am on a Sun 3/260 running SunOS3.5.  Plugged into Serial Port A
I have a Microcom AX/2400 modem.  Some of the users at my site are
so dedicated that they actually want to be able to do some work
while they are home by way of calling in on their modems! (Can
you believe it?)  

Here's the question:  They (the users) have told me of other
systems they have been on (I believe Vax's) where they were
prompted to enter a system password before they were even asked for
thier own.  This could be some cryptic type of combination of
letters and numbers, making it almost impossible for the average
hacker to break. Anyone have ideas on how I could incorporate this
into my passwd file, but only having it prompt those who are dialing
in on the modem?  This could get to be a real pain if they had to
respond to another password everytime they logged in from a work-
station here at work.  

Then, once the caller successfully types in the system password, 
they would still have to enter their own password.  Is such a
thing possible?  Thanks.
-- 
------------------------------------------------------------------
Don Cox :=)
UUCP: ..!rutgers!rochester!kodak!fedsys!scotty!dec
DISCLAIMER: The opinions expressed are mine and not of my employer.