Since changes are a'coming....

I like the idea of a new DIRMAINT/ESM authorization
    LGNBYGRP acigname1 acigname2 ...

/Tom Kern

Alan Altmark wrote:
> That wouldn't work.  The exit is called after the LOGON command has been 
> parsed, but before LOGON has actually begun.  No passwords validated and 
> no LOGON BY permissions have been determined yet.
> 
> Shimon's patch to HCPRPI (where ESMs are born) is the only solution I see, 
> but HCPRPI mods are inherently dangerous.
> 1) They ARE the security subsystem.
> 2) they must change as CP changes. [free advice:  changes are a-comin', 
> rollin' 'round the bend.]
> 3) You need HLASM
> 
> Buy an ESM or forget it.
> 
> Alan Altmark
> z/VM Development
> IBM Endicott
> 

Reply via email to