Edward Jaffe wrote:
> Mark Jacobs wrote:
>> Last year I attempted to implement SMCS console support to provide the
>> various support teams console access whenever TSO/SDSF isn't available.
>>
>> Our operations manager nixed the plan for what he thought were security
>> reasons.
>
> Such as??
>
Basically he "insisted" that we could do more "stuff" with an SMCS
console that we could with a EMCS console.

I think he got spooked with the CONSOLE piece of the acronym since he
didn't want consoles active anywhere other than in secure locations.

I guess he didn't understand that when a user enters a command via the
SDSF command line an EMCS session is started.

>> Are there any differences in security related "stuff" between SMCS
>> console capabilities and an SDSF (EMCS) console? We would require the
>> user to logon to the SMCS application so RACF would only grant access to
>> authorized personal and all other RACF profiles/rules would be in effect
>> for that user.
>>   
>
> The port of entry on the UTOKEN specified via MGCRE will be different.
> (One is a console. The other, a TSO user.) The only way I can envision
> that making any substantive difference is if you go out of your way to
> differentiate them -- for example, by specifying "WHEN CONSOLE(xxxx)"
> on your OPERCMDS resource profile definitions.
>


-- 
Mark Jacobs
Time Customer Service
Tampa, FL
----

Everyone always coming to Zathras with problems.  Great responsibilities.
But Zathras does not mind.  Zathras trained in crisis management.

Zathras, Babylon 5

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to