Thanks one and all, still digging on what and if we will use SSH for provisioning we are also considering Restapi. Never a dull moment.
Scott On Wed, Jul 25, 2018 at 10:48 AM Kirk Wolf <[email protected]> wrote: > Here's a z/OS OpenSSH Kerberos cookbook: > > https://dovetail.com/docs/ssh/kerberos_sso.pdf > > We also did a SHARE presentation in 2016 on the same topic, but the white > paper is more complete. > > On Wed, Jul 25, 2018 at 9:42 AM, Ed Jaffe <[email protected]> > wrote: > > > On 7/24/2018 1:20 PM, scott Ford wrote: > > > >> Do all Z customers run ICSF and the crypto cards ? > >> > > > > No. > > > > I read in the z/Os 2.3 > >> doc that SSH requires the crypto card and ICSF. > >> > > > > ICSF=Yes. Crypto-Card=No. > > > > I also found that you can > >> use Kerberos. If so does Kerberos require the Crypto card ? > >> > > > > No, but if you can actually get Kerberos set up and working I would > > appreciate if you could put together a layman's "cook book" for doing > so... > > > > -- > > Phoenix Software International > > Edward E. Jaffe > > 831 Parkview Drive North > > El Segundo, CA 90245 > > https://www.phoenixsoftware.com/ > > > > ------------------------------------------------------------ > > -------------------- > > This e-mail message, including any attachments, appended messages and the > > information contained therein, is for the sole use of the intended > > recipient(s). If you are not an intended recipient or have otherwise > > received this email message in error, any use, dissemination, > distribution, > > review, storage or copying of this e-mail message and the information > > contained therein is strictly prohibited. If you are not an intended > > recipient, please contact the sender by reply e-mail and destroy all > copies > > of this email message and do not otherwise utilize or retain this email > > message or any or all of the information contained therein. Although this > > email message and any attachments or appended messages are believed to be > > free of any virus or other defect that might affect any computer system > > into > > which it is received and opened, it is the responsibility of the > recipient > > to ensure that it is virus free and no responsibility is accepted by the > > sender for any loss or damage arising in any way from its opening or use. > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- Scott Ford IDMWORKS z/OS Development ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
