Originally From: vin @
net (Vin McLellan)
SDI Engineering will eventually put in a command line interface for
administration in the ACE code -- and it probably will be a 2.X version of
the ACE/Server, rather than a 3.X -- but it doesn't exist now and there are
no plans to offer it in the immediate future.
I personally find this the one most frustrating thing about SecurID. I
can't automatically determine card usage (logs, active cards, etc) or
snapshot the database using their tools. Hence, for example, I am unable to
determine easily if someone slipped in somehow and created (or
reactivitated) a new card (which would be a person problem on my side) or
automate a map of card usage by time of day.
In the drive to GUI interfaces (and I'm treating SDI's menu mechanism as a
weak-GUI), people forget that without the command line interface, you can't
perform automatic verification of manual processes, perform regularly
schedule tasks (such as a database dump), and such. This 'new feature'
frequently hampers large site automation of security checks.
The fastest way for a sales person to lower my opinion of their product is
for them to say that they converted their administration to a GUI since this
means that they've just broken automated administration and they've now
consumed 30 minutes of someone's time to do the daily peek. This is
especially true if that GUI is Windows based (since DOS/Windows tasks are
not easily automated anyway).
Manager, Technical Support
Damark International, Inc.
Normal disclaimers apply.....