On 1/5/2006 9:57 AM, Lester, Bob wrote:
This does sound a lot better that the .netrc approach (which we've been
using). Can you point me to the relevent manuals? Redbooks?
What level of info do you need? If you're already using digital
certificates then you have some basic info and infrastructure setup already.
If you're not using them, then
(a) you should be; but
(b) you'll need to do a lot more reading and experimenting.
Some information sources that should help:
(a) RACF Security Administrator's Guide chapter 21, at
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ICHZA760/21.0?SHELF=EZ2ZO10F&DT=20050713233738
or http://makeashorterlink.com/?P44925C6C
(b) z/OS PKI Services Guide and Reference (you may not need to use PKI
Services, but there's also some good background info in this book) at
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IKYZA140/CCONTENTS?SHELF=EZ2ZO10F&DN=SA22-7693-06&DT=20050709135510
or http://makeashorterlink.com/?X1DD242AB
(c) The RACF Presentations page at
http://www-03.ibm.com/servers/eserver/zseries/zos/racf/presentations.html
where you will find presentations on RACF and the Digital Certificate
and some on security for z/OS Communications Server
(d) The z/OS Communications Server IP Configuration Guide and Reference
books:
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B350/CCONTENTS?SHELF=EZ2ZO10F&DN=SC31-8775-07&DT=20050708113621
or http://makeashorterlink.com/?N25921C6C
and
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B450/CCONTENTS?SHELF=EZ2ZO10F&DN=SC31-8776-08&DT=20050707162049
or http://makeashorterlink.com/?J16962C6C
(e) The z/OS Communications Server IP User's Guide and Commands, at
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B950/CCONTENTS?SHELF=EZ2ZO10F&DN=SC31-8780-05&DT=20050708142126
or http://makeashorterlink.com/?B47932C6C
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
