On Fri, 8 Jan 2021 12:19:28 -0500, Sam Golob wrote:
>
> Does anyone have user-written code for RACF, so that if the user
>types in a password, the code will verify if it is the user's actual
>LOGON password?
>
> I'd like to see code that does this, for ACF2 and Top Secret as
>well, but I'm
/*
Check password for a userid.
Note: requires program-controlled environment
To build:
c99 -o checkpass checkpass.c i
extattr +p checkpass
*/
#define _POSIX_SOURCE
#include
#include
#include
#include
#include
#include
int main(int argc, char** argv) {
if (argc != 3) {
The code I have was / is very old for mid 90's to validate CATIA userid's using
RACF, if you want I can provide as is
Carmen Vitullo
-Original Message-
From: Sam
To: IBM-MAIN
Date: Friday, 8 January 2021 11:20 AM CST
Subject: Code to verify LOGON password
Dear Folks,
On Fri, 8 Jan 2021 at 12:19, Sam Golob wrote:
> Does anyone have user-written code for RACF, so that if the user
> types in a password, the code will verify if it is the user's actual
> LOGON password?
More detailed specs, please.
Are you fundamentally looking for sample code to learn
I'm not sure about that at define time (might work, might not), but the zfsadm
compress command will use zEDC compression on an existing zFS dataset.
Mark Jacobs
Sent from ProtonMail, Swiss-based encrypted email.
GPG Public Key -
W dniu 08.01.2021 o 17:46, Paul Gilmartin pisze:
On Fri, 8 Jan 2021 16:07:31 +, Seymour J Metz wrote:
A zFS is stored in a VSAM linear data set. I found "Only extended-format
key-sequenced data sets can be compressed." at
Dear Folks,
Does anyone have user-written code for RACF, so that if the user
types in a password, the code will verify if it is the user's actual
LOGON password?
I'd like to see code that does this, for ACF2 and Top Secret as
well, but I'm primarily interested in RACF.
Thank
Thanks. I thought that the 4341 had it, but I couldn't find anything on
bitsavers to back that up.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
WILLIAM H BLAIR
Something about this makes me nervous.
At a minimum you need @Gils's suggestion that the password not exist in your
address space (or if it does you really, really know what you are doing).
And you need to make certain your code is not a vehicle for someone to mount a
brute force attack while
Thanks Ken,
I checked for default MIH values for these devices and they are set at 3
minutes. However, once devices are allocated to Teradata, it gets changed
to 00 minutes. I am checking further.
Thanks a lot for these information. I think MIH definition will help. I
will let you know the
That's a definitive answer, thanks.
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Seymour J Metz
Sent: Friday, January 8, 2021 11:08 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ZFS using zEDC hardware compression
[External Email. Exercise caution when clicking
My personal zFS filesystem is compressed (using zfsadm compress)
$ zfsadm fsinfo -aggregate OMVS.PROD.SY010A.ZFS
File System Name: OMVS.PROD.SY010A.ZFS
Status: RW,NS,EN,CO
Legend: RW=Read-write, NS=Mounted NORWSHARE, EN=Encrypted, CO=Compressed
Sent from ProtonMail, Swiss-based
Can a ZFS dataset be defined with the DATACLAS zEDC compression option? I'm
looking for a way
to reduce the size of our SMPNTS datasets.
Confidentiality notice:
This e-mail message, including any attachments, may contain legally privileged
and/or confidential information. If you are not the
W dniu 08.01.2021 o 16:00, PINION, RICHARD W. pisze:
Can a ZFS dataset be defined with the DATACLAS zEDC compression option? I'm
looking for a way
to reduce the size of our SMPNTS datasets.
I guess YES.
However ...just try it. Create some test ZFS with copression and put
some txt files
We're at z/OS 2.2, hoping to go to 2.4 soon, so zfsadm compress isn't available.
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Mark Jacobs
Sent: Friday, January 8, 2021 11:47 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: ZFS using zEDC hardware compression
A zFS is stored in a VSAM linear data set. I found "Only extended-format
key-sequenced data sets can be compressed." at
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.idad400/compdta.htm
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
I just RTFM. No VSAM dataset can be compressed using zEDC.
Of course VSAM datasets dumped with DFSMSdss may be compressed, because:
a) output dataset is PS, which is eligible for zEDC compression.
b) dss itself can use zEDC to compress data written to output. Such
dataset can be writted on tape
On Fri, 8 Jan 2021 16:07:31 +, Seymour J Metz wrote:
>A zFS is stored in a VSAM linear data set. I found "Only extended-format
>key-sequenced data sets can be compressed." at
>https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.idad400/compdta.htm
>
This is a
Sam,
I'm curious as to the usage scenario? This almost sounds like a security
problem? So you take a users password input, go ask SAF if correct? Sounds
like a man-in-the-middle situation?
The 4341 was introduced in 1979 before DAS (1981), and was marketed
primarily for its ability to run in ECPS:VSE mode to support DOS/VSE.
GA24-3672-4_4341ProcessorMG1FunctionalCharacteristics under Programming
Support says"programming support is provided by DOS/VSE, OS/VSl,
OS/VS2-MVS, and
I think if you were just going to take the password and verify that it was
correct (or not), that shouldn't be a big issue. Although there should be some
way to keep the user from using it to "guess" other people's passwords. Maybe
a limit on tries, or a way to inform someone that they tried
Is anyone using IBM's Cloud Tape Connector product that can tell me about the
software requirements for it? Is it just the product that needs to be licensed
under z/OS, or do you need to license so "other" stuff as well?
Also, any comments on how it's working out for you would be helpful as
I seem to remember the verify processing bumping up the password fail
count and revoking the id without any additional logic - even returning
codes indicating those issues. But it's probably been 20 years since I
coded such things, and those brain cells have long since been loaded
with other
If the question relates to CICS, you can use the VERIFY PASSWORD exec
interface call.
*| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere
Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux
and IBM I **| *
*|* *Email**: i_mugz...@securiteam.co.il **|*
24 matches
Mail list logo
