Re: PAM to authenticate using zVM userid/password

2011-02-23 Thread Donald Russell
Thanks to all who replied with suggestions. Yes, it's not about being cool, or going boldly where others fear to tread, but rather making people less cranky about password maintenance. In my environment, all zLinux users are also VM/CMS users. They have a userid on VM and the same userid on

Re: PAM to authenticate using zVM userid/password

2011-02-16 Thread David Boyes
Before I go off to investigate what it would take to write one... is there already a PAM module for zLinux that will accept a userid/password and authenticate it against the VM host it's running on? I have one mostly complete, but it's not free. Without that, you can probably do it with the

Re: PAM to authenticate using zVM userid/password

2011-02-16 Thread Alan Altmark
On Wednesday, 02/16/2011 at 03:54 EST, Donald Russell russell@gmail.com wrote: Before I go off to investigate what it would take to write one... is there already a PAM module for zLinux that will accept a userid/password and authenticate it against the VM host it's running on? For

Re: PAM to authenticate using zVM userid/password

2011-02-16 Thread Rich Smrcina
Yes, using the LDAP support in z/VM, PAM can authenticate against RACF. See various articles in zJournal and doc in the z/VM library and Redbooks. On 02/16/2011 02:53 PM, Donald Russell wrote: Before I go off to investigate what it would take to write one... is there already a PAM module for

Re: PAM to authenticate using zVM userid/password

2011-02-16 Thread Dave Jones
Hi, Donald. Yeah, it's a cool thing to do, alright. Go with the LDAP-RACF approach Alan and others have mentioned already, if you're already running RACF. If you're not, there are other ways to get PAM on zLinux to authenticate against CMS user ids, and passwords. I can send you more information

Re: PAM to authenticate using zVM userid/password

2011-02-16 Thread Marcy Cortes
Well, being devil's advocate here... Why is it a cool thing to do? Doesn't it make more sense to use whatever every other Linux/unix box in your shop is using?All those other people may get cranky if you make them get a CMS id to login to Linux or to use a web app. Unless you have no Linux

Re: PAM to authenticate using zVM userid/password

2011-02-16 Thread Alan Altmark
On Wednesday, 02/16/2011 at 04:53 EST, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Why is it a cool thing to do? Doesn't it make more sense to use whatever every other Linux/unix box in your shop is using?All those other people may get cranky if you make them get a CMS id to login