RACF, external password management

Linda Hagedorn wrote: >My company wants an external password manager to substitute for RACF. >I need to know if anyone has experience with this, or common password >matching in RACF. >Background >Regulations NYDFS require preventing common passwords to be used. >Vendor tools (Courion, CyberArk,

Re: UFT and NJE

I forgot the link to the project ... *https://github.com/trothr/uft/* -- R; <>< On 2/28/24 18:01, Rick Troth wrote: A friend and I were recently talking about NJE over IP (specifically FUNet NJE) and I mentioned UFT. He had not known about UFT and seemed very interested. It has been

Re: RACF, external password management

Hi, If what you need is to prevent users from using easy to guess passwords, RACF already has the tools that you need, from implementing mixed case, passphrases, and special characters, or/and using the password or passphrase exit, which is very easy to implement, to validate password complexity

UFT and NJE

A friend and I were recently talking about NJE over IP (specifically FUNet NJE) and I mentioned UFT. He had not known about UFT and seemed very interested. It has been around for years, and sometimes gets interest again. So I thought I should mention it here. UFT is "unsolicited file

Re: RACF, external password management

Hi Linda: Could you define common passwords? Are we talking about commonly used passwords? Or are we talking about a password that is common to multiple users IDs? Suppose you were to use three Chars and then numbers to make up a TSO ID. These are the IDs used by people that do not need

Re: RACF, external password management

Linda, I'd think twice on this topic. We do vault our elevated access id's and I am fine with that, but to hand off all password management is a solution looking for a problem. There is the racf password quality exit that can be coded up to disallow "common" passwords. On top of that, you

Re: Getting the DFHEIENT macro to generate an RSECT (CICS/assembler)

Specify the NOPROLOG translator option. You also may need the NOEPILOG translator, depending on what you have coded. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with

Re: RACF, external password management

We had our typical users (some exceptions for Security team, etc) change their password on AD (Ctrl-Alt-Del) with a 3rd party tool providing extra controls as desired. Then we scripted a send of the accepted pw/phrase up to RACF with the request to set the password/phrase there. The basic RACF

RACF, external password management

My company wants an external password manager to substitute for RACF. I need to know if anyone has experience with this, or common password matching in RACF. Background Regulations NYDFS require preventing common passwords to be used. Vendor tools (Courion, CyberArk, etc.) have a corpus to

Re: Nanosecond resolution timestamps for HLL's?

I did not answer your question about " What's the fastest way one processor can signal the other? Spinning on a storage content? Then a cache fault might provide sufficient delay to guarantee consistency." because I did not know how that is implemented in current machines. I asked today,

Re: Getting rid of a z14 zr1 - any value in the host cards?

W dniu 27.02.2024 o 04:54, Laurence Chiu pisze: Somebody said to me the z14 cards cannot be used in a Z15 or z16 because of a difference in form factor! This seemed like an ill-informed comment to me since all the cards probably use some sort of PCI connector and IBM would not change them

Re: Signing off

First: Happy retirement to Sean! Regarding ICL 19xx - I bet the last machine from that family was switched off in Poland, 2006 (year, not model). However it was polish product called ODRA. To clarify, ODRA (name of the river) was a name of several completely different machines. This knowledge

Re: SDWAEC1

I feel like I’m at the mainframe version of the Apple genius bar. Self proclaimed. Sent from Yahoo Mail for iPhone On Wednesday, February 28, 2024, 12:21 AM, zMan <059081901144-dmarc-requ...@listserv.ua.edu> wrote: > > Don’t challenge the list gods. Or risk meeting the same fate as Bill

Re: Nanosecond resolution timestamps for HLL's?

FWIW, JZOS has an api: com.ibm.jzos.ZUtil::getTodClockExtended() https://www.ibm.com/docs/en/sdk-java-technology/8?topic=jzos-zutil Kirk Wolf Dovetailed Technologies http:// coztoolkit.com -- For