On Tuesday, 05/20/2008 at 02:37 EDT, RPN01 <[EMAIL PROTECTED]> wrote:
> Someone commented that it was somewhat "clunky", but what we've been 
doing
> for the grants is to add two COMMAND statements to each guest's CP 
Directory
> entry (actually via an include); the first does the grant for the user, 
and
> the second does a couple to connect up the vSwitch, if it isn't already
> connected.
> 
> Before this, each new Linux guest had to be added to either the SYSTEM
> CONFIG (problematic) or AUTOLOG1 (time consuming), and either method 
allows
> the person doing it to forget, make a mistake or make some typo in the
> addition that could cause problems much later during the next IPL, at 
which
> time it will take at least a short time to diagnose and repair. Having 
the
> whole thing taken care of in one entry in the CP Directory, and included 
in
> each guest that needs it, is much less prone to any errors someone (such 
as
> me) might tend to make. It's one less thing to remember when creating a 
new
> Linux guest.

Or the NICDEF plus a single entry in your ESM.  RACF has authorization 
controls for VSWITCHes, Guest LANs, and VLAN IDs.  Set it and forget it.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to