From:	MERC::"uunet!CRVAX.SRI.COM!RELAY-INFO-VAX" 19-OCT-1992 00:17:17.57
To:	info-vax@kl.sri.com
CC:	
Subj:	Re: Logging in to someone elses account without using their password.


   In response to an earlier posting where someone asked how with privs that
a system manager could login to another users account without supplying or 
changing the user's password.
   I have just written a utility that I've named GLOGIN that allows someone
with both SYSPRV and CMKRNL to login to someone elses account without fiddling
around with their password.
   GLOGIN requires either the PY/TW or the FTA psuedo terminal driver.  FTA
comes with VMS 5.4 and above.  PY/TW came with DECWindows or VWS.  PY/TW is
also public domain and the sources are available from several VMS fileservers
or with CMU-TEK tcp/ip.  If both drivers are available the utility will use
the FTA driver.
   This utility does more than just poke ones UIC and USERNAME.  When using 
GLOGIN to get into another account you inherit the target userid's interactive
environment.  Rights-identifiers, symbols and logical names declared in the
login.com and privs and quotas for the target user.  This allows very accurate
testing/debugging on behalf of a particular user.
   The program is written in VAX MACRO.  To use it just assemble and link it.
Then define a foreign symbol to run the executable.  It takes one parameter,
the userid of the target user.

Tony McCracken


+----------------------------------------+-----------------------------------+
| Anthony C. McCracken                   |                                   |
| Northern Arizona University            | Boom boom boom,,, Still going !   |
| Flagstaff, Arizona                     |                                   |
|                                        | VMS just keeps going and going and|
| acm@nauvax                   BitNet    | going.  Nothing outlasts VAX/VMS. |
| acm@nauvax.ucc.nau.edu       Internet  |                                   |
| 602.523.9422.us.west         Noise net |                                   |
+----------------------------------------+-----------------------------------+