Re: Looking for a quick answer here

2023-02-12 Thread Ed Jaffe

On 2/12/2023 12:52 PM, Robert Garrett wrote:

Is AT-TLS (or some other encryption mechanism) supported in the case of z/OS running 
as an NFS >client<, connecting to (for example) a Linux NFS server?


For many years, NFS was a UDP-only protocol and therefore incompatible 
with AT-TLS which supports TCP only.


Versions 3 and 4 of NFS support TCP in addition to UDP.

If you limit all of your NFS clients and servers to use TCP only, I 
would think you should be able to encrypt your IP traffic with AT-TLS on 
the z/OS side.



--
Phoenix Software International
Edward E. Jaffe
831 Parkview Drive North
El Segundo, CA 90245
https://www.phoenixsoftware.com/



This e-mail message, including any attachments, appended messages and the
information contained therein, is for the sole use of the intended
recipient(s). If you are not an intended recipient or have otherwise
received this email message in error, any use, dissemination, distribution,
review, storage or copying of this e-mail message and the information
contained therein is strictly prohibited. If you are not an intended
recipient, please contact the sender by reply e-mail and destroy all copies
of this email message and do not otherwise utilize or retain this email
message or any or all of the information contained therein. Although this
email message and any attachments or appended messages are believed to be
free of any virus or other defect that might affect any computer system into
which it is received and opened, it is the responsibility of the recipient
to ensure that it is virus free and no responsibility is accepted by the
sender for any loss or damage arising in any way from its opening or use.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Looking for a quick answer here

2023-02-12 Thread Mike Hochee
Hi Rob, 

My guess is yes, but that's no definitive answer.  SHARE session 16948 - 
Leveraging z/OS Comm Server At-TLS, contains the email address of what may be 
one of the developers. If no one here provides a definitive answer you might 
want to reach out to Lin. I did so several years ago and got an xlnt answer.   
https://share.confex.com/share/124/webprogram/Handout/Session16948/SHARE%20032015%20ATTLS.pdf
 

HTH, 
Mike 

-Original Message-
From: IBM Mainframe Discussion List  On Behalf Of 
Robert Garrett
Sent: Sunday, February 12, 2023 3:52 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Looking for a quick answer here

Caution! This message was sent from outside your organization.

Is AT-TLS (or some other encryption mechanism) supported in the case of z/OS 
running as an NFS >client<, connecting to (for example) a Linux NFS server?

I've been looking through the doc and haven't yet found a definitive answer.  
Looking for a solution to enable z/OS to act as an NFS client and have that 
connection be secure.

Thanks,
Rob

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN