At 09:57 AM 4/12/2007, you wrote:
----- Original Message ----- From: "Rick Fochtman" <[EMAIL PROTECTED]>
Newsgroups: bit.listserv.ibm-main
Sent: Wednesday, April 11, 2007 7:37 PM
Subject: Re: When to start security product?
-----------------------<snip>----------------------
We use Top Secret. A consultant made a recommendation late last
year that Top Secret should be the first task started during the
IPL procedure. The Security Administrator has requested this change.
Currently, we start Top Secret after JES2 completes its start
procedure. I really don't see the merit in moving the start of Top
Secret earlier in the IPL procedure.
Can anyone explain why starting Top Secret/security product is more
advantageous?
-----------------------<unsnip>-----------------------
IMHO, as long as it's up and initialized before any users can get
access, the detailed timing doesn't matter. Before or after JES2
shouldn't matter a whit. Consider this: if there's a JCL error in
the proc, starting it AFTER JES2 will allow you to capture the
error without too much trouble.
When converting from ACF2 to RACF, it turns out that ACF2 starts WAY
later than RACF. We found that out the hard way when IXGLOGR yakked
on our first RACF IPL (can't leave home without IXGLOGR). We had to
add a bunch of RACF profiles just to get the system to IPL, because
there was no need for those rules in ACF2.
Really? I had to right 2 or 3 Fac resource rules, possibly a SAF
in there as well. BUT then I start ACF2 before JES2.
Regards,
Tom Conley
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Brian W. France
Systems Administrator (Mainframe)
Pennsylvania State University
Administrative Information Services - Infrastructure/SYSARC
Rm 25 Shields Bldg., University Park, Pa. 16802
814-863-4739
[EMAIL PROTECTED]
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
