Hello, all. A Happy New Year to everyone. I hope that 2008 brings you peace and prosperity.
Every now and then we re-evaluate the services z/VM provides. In case you didn't notice, z/VM 5.3 dropped support for ROUTED, leaving MPROUTE as the only supported dynamic routing daemon. We also dropped BOOTP. (Our intent to drop these was announced with z/VM 5.2.) Further, with z/VM 5.3 we also stated our intent to withdraw in a future release: - NDB (an old SQL/DB2 access method) - TFTP (trivial and anonymous FTP) - X.25 support via a 37xx controller - Imbedded IP-over-SNA (SNALINK) in a future release. Now on to Kerberos.... Is anyone Out There actively building CMS Kerberos apps or who is depending on the z/VM Kerberos daemon for outboard Kerberos apps? I would like to consider dropping Kerberos from the suite of z/VM services at some point, but I need some feedback from any active users or from anyone who has been seriously considering adding Kerberos to your stable of VM services. Naturally, if you're not using z/VM Kerberos, you don't need to speak up. Having a list of people NOT using Kerberos isn't very useful to me. :-) If you feel uncomfortable posting here, I'll accept off-list mail as well. Kerberos state of the art: - IBM does not provide any CMS kerberized applications other than samples - The CMS programming API and server application are at Kerberos v4 - MIT no longer publishes patches for Kerberos v4 - Kerberos v5 is the standard du jour - z/VM is focused on support for X.509 certificates and TLS/SSL for privacy, data integrity, and authentication In case anyone is wondering what's left, that would leave z/VM with its core services: - rexec - telnet - smtp - snmp - ftp - uft - lpr - nfs - ldap - imap - dns - dhcp - rpc - cim (via Linux-based appliance) Alan Altmark z/VM Development IBM Endicott
