(cross-posting: MVS-OE and IBM-MAIN)

We have a problem with secure NFS.  Apparently some product
requires an exact match, not only of UIDs, but of user names.
The comparison is case-sensitive.  The standard (convention?)
among our open-systems people is user IDs are minuscule.
z/OS, on the other hand, is OS/360.  So, I'm looking at:

USERIDALIASTABLE
z/OS UNIX System Services Planning
GA32-0884-00
http://pic.dhe.ibm.com/infocenter/zos/v2r1/topic/com.ibm.zos.v2r1.bpxb200/cusali.htm

Does this translation work both ways?  Does getpwuid() or any
service NFS is likely to use return the alias?  The page cited
seems to imply so:  "Database queries, however, will yield the
new alias if the user ID performing the query has read or
execute access to the alias table."  "execute"!?  Likewise,
does getuid() honor the alias?

Are there other options?  Can a mixed-case user ID be added to
the RACF data base, perhaps with a low-level interface, even as
STOW called from an Assembler program can create mixed-case
member names?

(They're bigger than we; they're extremely unlikely to change.
Weakening the security criteria is similarly unlikely.)

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to