Re: OPENLDAP replacing mainframe security?

2012-10-23 Thread John McKown
Sounds like upper IT management at my shop. I can do *anything* so long as it doesn't cost hard dollars. And we are minimizing software & hardware costs, even if it causes problems later. Education is not the answer. I will avoid specifying what they really need. On Oct 23, 2012 8:45 PM, "Rob Schra

Re: OPENLDAP replacing mainframe security?

2012-10-23 Thread Rob Schramm
Then give CA the boot and get RACF. There are people that can help you convert. IBM will be more than happy to add it. If you want to do the conversion yourself, there is a Redbook. If CA won't work on the contract $$$, then show them the door. CA is either a strategic partner.. or not. I wou

Re: OPENLDAP replacing mainframe security?

2012-10-23 Thread Dave McHenry
The "problem" being "solved" is twofold 1. Cost of CA TSS 2. Desire to eliminate CA. On Tue, Oct 23, 2012 at 4:52 PM, Tony Harminc wrote: > On 23 October 2012 07:39, Dave McHenry wrote: > > A manager of ours read a link that claims OPENLDAP could be used to > replace > > our current mainframe s

Re: OPENLDAP replacing mainframe security?

2012-10-23 Thread Tony Harminc
On 23 October 2012 07:39, Dave McHenry wrote: > A manager of ours read a link that claims OPENLDAP could be used to replace > our current mainframe security. Everyone I've asked about this laughs and > says impossible. Is it impossible? I'm assuming you mean running OpenLDAP on some other platfor

Re: OPENLDAP replacing mainframe security?

2012-10-23 Thread Paul Gilmartin
On Tue, 23 Oct 2012 07:39:27 -0400, Dave McHenry wrote: >A manager of ours read a link that claims OPENLDAP could be used to replace >our current mainframe security. Everyone I've asked about this laughs and >says impossible. Is it impossible? > Like 8-character user IDs and NTP, it may become a

Re: OPENLDAP replacing mainframe security?

2012-10-23 Thread Rob Schramm
Yes... well pretty much impossible. Would it be possible to fix up how z/OS security calls worked to always use OpenLDAP... probably... but it would be slow and cost a to do. But only for classic z/OS security. LDAP could be used for WebSphere on z/OS and it is possible to use L

OPENLDAP replacing mainframe security?

2012-10-23 Thread Dave McHenry
A manager of ours read a link that claims OPENLDAP could be used to replace our current mainframe security. Everyone I've asked about this laughs and says impossible. Is it impossible? Dave McHenry -- For IBM-MAIN subscribe / sig