Kirk Wolf wrote:
>Are you running Kerberos enabled NFS over IPSec?

I was going to mention IPSec, but you partially beat me to it. FTP over
IPSec is another possible file transfer option. Then it's possible to use
the Ant task for FTP (within its remaining limitations) but have an
encrypted network connection. Other connections can ride "shotgun" over the
same IPSec tunnel if desired -- TN3270E, Telnet, SNTP, NFS, MQ, HTTP,
database connections (e.g. JDBC), IP sockets, Enterprise Extender,
CIFS/SMB, etc. You can also configure separate IPSec tunnels to support
connections that shouldn't be combined on the same tunnel. There's a lot of
merit in an IPSec-based approach, including for developers who might need
half a dozen connection types to a development LPAR all at once. You can
encrypt them separately of course (and probably should in many use cases),
or you can ride them all over IPSec.

Please note that OpenSSH is now part of the base z/OS 2.2 operating system.

--------------------------------------------------------------------------------------------------------
Timothy Sipples
IT Architect Executive, Industry Solutions, IBM z Systems, AP/GCG/MEA
E-Mail: [email protected]

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to