NOVELL TECHNICAL INFORMATION DOCUMENT

TITLE:  Encryption of username and password in SBCON
TID #:  2959357
README FOR:  sbcon1.exe

SUPERSEDES:
sbconft1.exe

NOVELL PRODUCTS and VERSIONS:
Server 5.0
Server 5.1

ABSTRACT:

This patch encrypts the username and password in the
SYS:\QUEUES\xxxxxxxx.QDR\xxxxxxx.Q file when using SBCon.



-----------------------------------------------------------------
DISCLAIMER
THE ORIGIN OF THIS INFORMATION MAY BE INTERNAL OR EXTERNAL TO 
NOVELL.  NOVELL MAKES ALL REASONABLE EFFORTS TO VERIFY THIS 
INFORMATION.  HOWEVER, THE INFORMATION PROVIDED IN THIS DOCUMENT 
IS FOR YOUR INFORMATION ONLY.  NOVELL MAKES NO EXPLICIT OR IMPLIED 
CLAIMS TO THE VALIDITY OF THIS INFORMATION.
-----------------------------------------------------------------


INSTALLATION INSTRUCTIONS:

1. Run sbconft1.exe, unzipping files into a temporary directory.
2. Rename the current SBCON.NLM, QMAN.NLM, and SME.NLM in the SYS:SYSTEM
directory for backup purposes.
3. Copy the new SBCON.NLM, QMAN.NLM, and SME.NLM to the SYS:SYSTEM directory.
4. Unload QMAN.NLM and reload it to activate the new version.




ISSUE: 

After submitting a backup job using SBCon a queue file is created (ie
SYS:\QUEUES\xxxxxxxx.QDR\xxxxxxx.Q). If the xxxxxxx.Q is viewed through any
text viewer (ie NOTEPAD.EXE) both the backup job submitter name and their
password are displayed in clear text. 
The xxxxxxx.Q file can only be viewed if the IRF on the QUEUES directory has
been modified, if a user has been given explicit rights to the QUEUES
directory, if the user is Admin or an Admin equivalent, or from the Server
Console. 

This patch encrypts the username and password in the
SYS:\QUEUES\xxxxxxxx.QDR\xxxxxxx.Q file.

10062818

Self-Extracting File Name: sbcon1.exe

Files Included          Size         Date          Time
..\
    SBCON1.TXT   (This file)
      QMAN.NLM        107598     6-3-2001    4:24:56 pm
     SBCON.NLM        388312     6-3-2001    4:26:28 pm
       SME.NLM        234080     6-3-2001    4:25:20 pm



-----------------------------------------------------------------
Any trademarks referenced in this document are the property of their respective
owners.  Consult your product manuals for complete trademark information.
-----------------------------------------------------------------