Another example of how OMVS is not well integrated. The 3270, and TSO support 
for the 3270, have supported non-display input fields since Old Man Noach 
cornered the market in gopher wood.


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3


________________________________________
From: IBM Mainframe Discussion List <[email protected]> on behalf of 
Paul Gilmartin <[email protected]>
Sent: Tuesday, January 21, 2020 3:00 PM
To: [email protected]
Subject: Re: IBM AOAR O44855

On Tue, 21 Jan 2020 10:40:07 -0800, Charles Mills wrote:

>I do not disagree. The decision to revoke is in the customer's hands. Before
>this APAR, the option to only say that the combination was invalid did not
>exist. So the APAR is 100% a good thing.
>
(some topic drift)
I suspect (novice) that C programmers rely on ioctl(?) fcntl(?) to suppress
echoing keystrokes during password entry.  Long ago I tried a test.  So
suppressing echo works as expected in a ssh session to z/OS UNIX.  But
in a 3270 OMVS session the password is visible during entry regardless.
I went to SR.  IBM took no action.  I believe this is the motivation for
IBM's partially prohibiting ssh and sftp from 3270 OMVS sessions.

FTP has never endured such a restriction.

I've discovered that /bin/script cleanses the 3270-ness of an OMVS session
and I can then use ssh and sftp but the password is displayed.  The password
does not appear in the typescript output file.

(Don't tell IBM.)

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to