As Rich Smrcina said, this can be accomplished by using LDAP. For OS
that support using NIS servers (Unix/Linux), you can even use LDAP on
z/OS as a NIS server, thus you don't even have to add users to the local
security database.
In addition to politics you may also run into password length problems.
Our distributed guys want 16 character passwords at a minimum. They
feel that 6 characters is too short (our current RACF minumum), even
with a 4 tries and your revoked.
Marvin Lukasik wrote:
In thinking about uses for the mainframe to extend its life, one that came to
mind is using RACF as a password server so users need only a single password
to logon into the many systems they must access. Like most shops today,
we have a multitude of Microsoft & Unix servers, each having different
security and hence, different passwords. We have reviewed many offerings
from vendors and most ( if not all ) completely ignore the mainframe and
are ENORMOUSLY expensive. Also, their performance was disappointing
and their systems were buggy. I would be interested in hearing comments
about anyone who has heard of a RACF-based product or written something
of their own to accomplish this. Also comments about the general feasability
and difficulty of such an endeavor would be welcome. To do this relatively
inexpensively on the mainframe would be quite a coup for an 'obsolete'
platform.
Marv Lukasik
Systems Programmer
Carle Clinic Association
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
