On Fri, 9 Jan 2009 16:35:39 -0600, Paul Gilmartin <[email protected]> wrote:

>On Fri, 9 Jan 2009 12:49:44 -0600, Walt Farrell wrote:
>>
>>With RSCS and appropriate RACF and JES setup RACF can supply the proper ID
>>automatically, with no passwords required.
>>
>FSVO "proper".  For historic reasons, my VM and z/OS user IDs
>differ.  Is there any way to automate jobs submitted by
>VMGIL to run as user ID ZOSGIL?  If IBM supplied an exit,
>they'd likely be delighted to activate it.

Yes, RACF an handle that, and without exits. The submission from VM to z/OS
works via JES NJE processing, and your administrator would setup NODES
profiles to accept jobs from the VM node and to translate your submitting ID
into the appropriate execution ID.

>...snipped...
>It would really be useful if RACF provided user ID aliasing,
>so whenever a program or programmer said "VMGIL" it would
>automatically seek on to the entry for "ZOSGIL", and there
>wouldn't be two OMVS segments with my UID.

Sorry, we do not have anything like that.   However, z/OS UNIX System
Services provides an aliasing capability that may help you in such situations.

-- 
  Walt Farrell, CISSP
  IBM STSM, z/OS Security Design

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to