We used Cyberark at a former employer. Starting around 2014 or 15. Our security department, none of whom had mainframe experience, chose it to solve a problem we didn’t have. I’m pretty sure the head of security read about it on a flight. Or an auditor did. It slows down everything on the MF. In emergency situations, it makes it harder to solve them in a timely manner. Every group had a workaround which circumvented the purpose of the software. There isn’t anything Cyberark does that can’t be done on the mainframe. What it does do is put the Cyberark administrator in charge of your staff. Not what I’d call smart. They just started a DR test. Already had a big delay in getting the proper Cyberark security to do the restores. As my contact there said an hour ago, it’s a cluster****.
Sent from Yahoo Mail for iPhone On Monday, April 24, 2023, 3:35 PM, Mark Jacobs <00000224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote: Sorry. I have no idea how the whole thing works from an infrastructure POV. I'm just a user, these were my observations at my $currentjob. Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get&search=markjac...@protonmail.com ------- Original Message ------- On Monday, April 24th, 2023 at 2:48 PM, Patrick Loftus <patricklof...@pmlnet.co.uk> wrote: > Hi, > I gather there is no supplied connector specific to z/OS. > Does your site use SSH to connect to z/OS and reset passwords, or do you have > an in-house written connector? > Thanks > > > > -----Original Message----- > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf Of > Mark Jacobs > > Sent: Monday, April 24, 2023 6:05 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: cyberark efforts > > Yes. Once a day, or when my checked out password expires I sign on to > Cyberark and checkout the new password. I then can use that to logon to any > system regardless of the RACF database it uses. > > Mark Jacobs > > Sent from ProtonMail, Swiss-based encrypted email. > > GPG Public Key - > https://api.protonmail.ch/pks/lookup?op=get&search=markjac...@protonmail.com > > > > > ------- Original Message ------- > On Monday, April 24th, 2023 at 1:02 PM, Bill Giannelli > billgianne...@gmail.com wrote: > > > > > kept in sync with cyberark? > > On Mon, 24 Apr 2023 16:55:24 +0000, Mark Jacobs markjac...@protonmail.com > > wrote: > > > > > We have multiple RACF databases, the passwords are all kept in sync via > > > RRSF links. One userid/one password. > > > > > > Mark Jacobs > > > > > > Sent from ProtonMail, Swiss-based encrypted email. > > > > > > GPG Public Key - > > > https://api.protonmail.ch/pks/lookup?op=get&search=markjacobs@proton > > > mail.com > > > > > > ------- Original Message ------- > > > On Monday, April 24th, 2023 at 12:29 PM, Bill Giannelli > > > billgianne...@gmail.com wrote: > > > > > > > do you share groups of accounts? Or do you have a one to one ids? > > > > cyberark id to racf id? > > > > On Mon, 24 Apr 2023 16:23:15 +0000, Mark Jacobs > > > > markjac...@protonmail.com wrote: > > > > > > > > > We use CyberArk for all privileged accounts, including z/OS. > > > > > > > > > > Mark Jacobs > > > > > > > > > > Sent from ProtonMail, Swiss-based encrypted email. > > > > > > > > > > GPG Public Key - > > > > > https://api.protonmail.ch/pks/lookup?op=get&search=markjacobs@pr > > > > > otonmail.com > > > > > > > > > > ------- Original Message ------- On Monday, April 24th, 2023 at > > > > > 12:15 PM, Bill Giannelli billgianne...@gmail.com wrote: > > > > > > > > > > > our company is pushing forward with cyberark for all platforms. > > > > > > the statement was made that cyberark and the like are becoming the > > > > > > industry standard. > > > > > > Is that true for z/OS systems? > > > > > > thanks > > > > > > Bill > > > > > > > > > > > > -------------------------------------------------------------- > > > > > > -------- For IBM-MAIN subscribe / signoff / archive access > > > > > > instructions, send email to lists...@listserv.ua.edu with the > > > > > > message: INFO IBM-MAIN > > > > > > > > > > ---------------------------------------------------------------- > > > > > ------ For IBM-MAIN subscribe / signoff / archive access > > > > > instructions, send email to lists...@listserv.ua.edu with the > > > > > message: INFO IBM-MAIN > > > > > > > > ------------------------------------------------------------------ > > > > ---- For IBM-MAIN subscribe / signoff / archive access > > > > instructions, send email to lists...@listserv.ua.edu with the > > > > message: INFO IBM-MAIN > > > > > > -------------------------------------------------------------------- > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO > > > IBM-MAIN > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
