Re: cyberark efforts

2023-05-01 Thread Bill Giannelli
Hi Bruce, Thanks so much for your response! Are the cyberark ids literally the same as the racf ids? Our cyberark team wants us to use separate group of "generic" cyberark ids different from our original RACF ids. So one day you might "check out" cyberark id 123, another day you might "check

Re: cyberark efforts

2023-04-30 Thread Bruce Hewson
Hello Bill, CyberArk can do RACF and Top Secret USER administration,. at least for PASSWORD change, and REVOKE/RELEASE processing. CyverArk will connect to Z/OS via ssh. Certificates are used for the ssh connection validation. The USER used by CybertArk must have suitable administrative

Re: cyberark efforts

2023-04-25 Thread Bill Giannelli
can anyone on this thread reach out to me that has had a successful implementation of cyberark when accessing z/OS? thanks Bill On Tue, 25 Apr 2023 12:02:09 -0500, Bill Giannelli wrote: >is that a TSO command? >On Tue, 25 Apr 2023 12:01:07 -0500, Doug Henry wrote: > >>They are different id's

Re: cyberark efforts

2023-04-25 Thread Bill Giannelli
is that a TSO command? On Tue, 25 Apr 2023 12:01:07 -0500, Doug Henry wrote: >They are different id's but you can use profile prefix command to set your HLQ >for unquoted dataset names. Of course all cyberarks id's are defined to RACF > >Doug >On Tue, 25 Apr 2023 11:18:19 -0500, Bill

Re: cyberark efforts

2023-04-25 Thread Doug Henry
They are different id's but you can use profile prefix command to set your HLQ for unquoted dataset names. Of course all cyberarks id's are defined to RACF Doug On Tue, 25 Apr 2023 11:18:19 -0500, Bill Giannelli wrote: >thank you all for the responses and information. >alot on z/OS is based

Re: cyberark efforts

2023-04-25 Thread Bill Giannelli
thank you all for the responses and information. alot on z/OS is based off of your RACF id and is used as a HLQ for alot of software. when setting up cyberark ids, are they identical to the racf id to resolve this? in our shop they want us to us completely different ids On Tue, 25 Apr 2023

Re: cyberark efforts

2023-04-25 Thread Doug Henry
We use Cyberark and yes it does connect to z/OS via SSH. Doug On Mon, 24 Apr 2023 19:34:46 +, Mark Jacobs wrote: >Sorry. I have no idea how the whole thing works from an infrastructure POV. >I'm just a user, these were my observations at my $currentjob. > >Mark Jacobs > > > >> Hi, >>

Re: cyberark efforts

2023-04-25 Thread Radoslaw Skorupka
W dniu 24.04.2023 o 18:15, Bill Giannelli pisze: our company is pushing forward with cyberark for all platforms. the statement was made that cyberark and the like are becoming the industry standard. Is that true for z/OS systems? thanks Bill It is neither z/OS nor industry standard. It is

Re: cyberark efforts

2023-04-24 Thread Bill Johnson
or do you have > an in-house written connector? > Thanks > > > > -Original Message- > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf Of > Mark Jacobs > > Sent: Monday, April 24, 2023 6:05 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re

Re: cyberark efforts

2023-04-24 Thread Mark Jacobs
or? > Thanks > > > > -Original Message- > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On Behalf Of > Mark Jacobs > > Sent: Monday, April 24, 2023 6:05 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: cyberark efforts > > Yes. Once a

Re: cyberark efforts

2023-04-24 Thread Patrick Loftus
, 2023 6:05 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: cyberark efforts Yes. Once a day, or when my checked out password expires I sign on to Cyberark and checkout the new password. I then can use that to logon to any system regardless of the RACF database it uses. Mark Jacobs Sent from

Re: cyberark efforts

2023-04-24 Thread Mark Jacobs
Yes. Once a day, or when my checked out password expires I sign on to Cyberark and checkout the new password. I then can use that to logon to any system regardless of the RACF database it uses. Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key -

Re: cyberark efforts

2023-04-24 Thread Bill Giannelli
kept in sync with cyberark? On Mon, 24 Apr 2023 16:55:24 +, Mark Jacobs wrote: >We have multiple RACF databases, the passwords are all kept in sync via RRSF >links. One userid/one password. > >Mark Jacobs > >Sent from ProtonMail, Swiss-based encrypted email. > >GPG Public Key -

Re: cyberark efforts

2023-04-24 Thread Mark Jacobs
We have multiple RACF databases, the passwords are all kept in sync via RRSF links. One userid/one password. Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com --- Original Message

Re: cyberark efforts

2023-04-24 Thread Bill Giannelli
do you share groups of accounts? Or do you have a one to one ids? cyberark id to racf id? On Mon, 24 Apr 2023 16:23:15 +, Mark Jacobs wrote: >We use CyberArk for all privileged accounts, including z/OS. > >Mark Jacobs > >Sent from ProtonMail, Swiss-based encrypted email. > >GPG Public Key

Re: cyberark efforts

2023-04-24 Thread Mark Jacobs
We use CyberArk for all privileged accounts, including z/OS. Mark Jacobs Sent from ProtonMail, Swiss-based encrypted email. GPG Public Key - https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com --- Original Message --- On Monday, April 24th, 2023 at 12:15 PM, Bill

cyberark efforts

2023-04-24 Thread Bill Giannelli
our company is pushing forward with cyberark for all platforms. the statement was made that cyberark and the like are becoming the industry standard. Is that true for z/OS systems? thanks Bill -- For IBM-MAIN subscribe / signoff