Novell NETWARE 6-DOCUMENTATION Manual page 2833

Changing the Signature Level for an NLM
Setting Packet Signature for Job Servers
76
Server Operating System Administration Guide
NLM programs that use the Novell Runtime Libraries are assigned a default
NCP Packet Signature level that corresponds to the current signature level of
the server.
To change the packet signature level for a single NLM, use the following
command syntax when you load the NLM:
[LOAD] NLM [CLIB_OPT]/L number
Replace number with 0, 1, 2, or 3.
A job server is a server that performs a task and then returns the completed
task. Most job servers are third-party products.
You should be aware that some job servers do not support NCP Packet
Signature. A job server might produce unsigned sessions if one of the
following occurs:
It does not operate on top of DOS
It does not use standard Novell clients
It is not an NLM
It uses its own implementation of the NCP engine (such as embedded
print servers in printers)
Minimizing Risks
To minimize security risks associated with job servers, do the following:
Install queues only on servers with signature level 3.
Do not allow privileged users to put jobs in queues on servers with
signature levels below 3.
Make sure the job server's account is unprivileged.
Disable the job server's ability to change to client rights.
Disabling Change to Client Rights
To prevent a job server from assuming the rights of a client, add the following
SET command to the server's STARTUP.NCF file:
SET Allow Change to Client Rights = OFF