Here's a z/OS OpenSSH Kerberos cookbook: https://dovetail.com/docs/ssh/kerberos_sso.pdf
We also did a SHARE presentation in 2016 on the same topic, but the white paper is more complete. On Wed, Jul 25, 2018 at 9:42 AM, Ed Jaffe <[email protected]> wrote: > On 7/24/2018 1:20 PM, scott Ford wrote: > >> Do all Z customers run ICSF and the crypto cards ? >> > > No. > > I read in the z/Os 2.3 >> doc that SSH requires the crypto card and ICSF. >> > > ICSF=Yes. Crypto-Card=No. > > I also found that you can >> use Kerberos. If so does Kerberos require the Crypto card ? >> > > No, but if you can actually get Kerberos set up and working I would > appreciate if you could put together a layman's "cook book" for doing so... > > -- > Phoenix Software International > Edward E. Jaffe > 831 Parkview Drive North > El Segundo, CA 90245 > https://www.phoenixsoftware.com/ > > ------------------------------------------------------------ > -------------------- > This e-mail message, including any attachments, appended messages and the > information contained therein, is for the sole use of the intended > recipient(s). If you are not an intended recipient or have otherwise > received this email message in error, any use, dissemination, distribution, > review, storage or copying of this e-mail message and the information > contained therein is strictly prohibited. If you are not an intended > recipient, please contact the sender by reply e-mail and destroy all copies > of this email message and do not otherwise utilize or retain this email > message or any or all of the information contained therein. Although this > email message and any attachments or appended messages are believed to be > free of any virus or other defect that might affect any computer system > into > which it is received and opened, it is the responsibility of the recipient > to ensure that it is virus free and no responsibility is accepted by the > sender for any loss or damage arising in any way from its opening or use. > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
