We have a fairly lo-tech method for propogating passwords. When a user gets a new password (in the z/OS realm), a small "encrypted" (it would not stand up to the CIA!) spool file is sent to a virtual machine on VM, which updates the VM:Secure password for the user.
I think the programming for the z/OS guy took longer (creating the spool file and getting it to me) than it took me to set up a machine with a WAKEUP loop and VM:Secure authorization. Shimon On Mon, Jan 24, 2011 at 4:58 PM, Alan Altmark <alan_altm...@us.ibm.com>wrote: > On Monday, 01/24/2011 at 07:06 EST, Alain Benveniste > <a.benveni...@free.fr> wrote: > > > We are looking how to propagate passwords between z/OS and z/VM. We want > to > > remove nc-syncom. Z/OS has RRSF available, not z/VM. Any reason ? Will > it be > > possible in a near future ? > > If you're not into the custom programming that Kris suggests, you can sync > passwords via LDAP using IBM Tivoli Directory Integrator. > > The reason RRSF is not available for z/VM is simple: (1) it's expensive to > do [only with the new TCP support was it even feasible], (2) the demand is > weak. If you want RACF on z/OS and z/VM to talk via RRSF, you need to > tell BOTH groups. For z/VM to "cradle" z/OS RRSF, it has to be built in a > way that is "cradle friendly," so there's work to be done on both sides. > Did I say "expensive" already? > > Alan Altmark > > z/VM and Linux on System z Consultant > IBM System Lab Services and Training > ibm.com/systems/services/labservices > office: 607.429.3323 > alan_altm...@us.ibm.com > IBM Endicott >
