HMC and LDAP

2010-07-26 Thread Tom Eden
Does anyone have any detailed information on fillling in the required fields on the LDAP setup screen for the HMC. We are having some issues with what should be in the search filter field. This is on a Z9. -- For IBM-MAIN

Re: HMC and LDAP

2009-04-08 Thread Hal Merritt
, 2009 7:43 PM To: IBM-MAIN@bama.ua.edu Subject: Re: HMC and LDAP It is worth noting that we chose to leave the IBM supplied accounts like SYSPROG, ACSADMIN, SERVICE in place as they are for this exact reason, however of the 10 accounts defined, only 2 of us know those passwords

Re: HMC and LDAP

2009-04-07 Thread Corjan Nota
, David Verzonden: maandag 6 april 2009 14:11 Aan: IBM-MAIN@BAMA.UA.EDU Onderwerp: Re: HMC and LDAP I set this up on our HMC's last year. Works nicely. Make sure you are current on HMC maintenance however, there was a bug if you have userids that start with a # sign. The problem has been fixed

Re: HMC and LDAP

2009-04-07 Thread Jousma, David
...@53.com 1830 East Paris, Grand Rapids, MI 49546 MD RSCB1G p 616.653.8429 f 616.653.8497 -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Corjan Nota Sent: Tuesday, April 07, 2009 3:46 AM To: IBM-MAIN@bama.ua.edu Subject: Re: HMC and LDAP

Re: HMC and LDAP

2009-04-07 Thread Hal Merritt
) to -any- such attack vectors as unacceptable. YMMV -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Jousma, David Sent: Tuesday, April 07, 2009 6:50 AM To: IBM-MAIN@bama.ua.edu Subject: Re: HMC and LDAP It's Microsoft based. Active

Re: HMC and LDAP

2009-04-07 Thread Corjan Nota
Onderwerp: Re: HMC and LDAP I am somewhat aware of how MS LDAP works, and am horrified. A key issue to me is that, by default, any user may display most all information about any other in a given 'container'. Even if that is not true, our shop still considers the risks of exposing the 'family jewels

Re: HMC and LDAP

2009-04-07 Thread Hal Merritt
-m...@bama.ua.edu] On Behalf Of Corjan Nota Sent: Tuesday, April 07, 2009 10:44 AM To: IBM-MAIN@bama.ua.edu Subject: Re: HMC and LDAP We are thinking to authenticate operators on our company wide LDAP Server residing on AIX behind a VPN with SSL/TLS. Not my preferred platform, but I can live

Re: HMC and LDAP

2009-04-07 Thread Jousma, David
To: IBM-MAIN@bama.ua.edu Subject: Re: HMC and LDAP Kind of a chicken and egg. How can you IPL if your LDAP server is not responding? Remember, as is, the MF can shrug off any LAN issues. You have the power to put the operation of the MF at the mercy of the company LAN. -Original Message

HMC and LDAP

2009-04-06 Thread Corjan Nota
Hello list, With HMC 2.9.2 it's possible to protect operator logon to the HMC with LDAP. Is anybody already using this functionality? If so, I' m very interested in how it is setup. We are using now a standalone HMC not connected to the LAN. Operators logon with the standard IBM passwords

Re: HMC and LDAP

2009-04-06 Thread Jousma, David
Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Corjan Nota Sent: Monday, April 06, 2009 7:25 AM To: IBM-MAIN@bama.ua.edu Subject: HMC and LDAP Hello list, With HMC 2.9.2 it's possible to protect operator logon to the HMC with LDAP. Is anybody already using this functionality