Matt/Timothy/Marna/all: Sorry the confusion, I misread a FAQ for z/OS 2.3
<snippet> Home z/OS 2.3.0 . . . Troubleshooting Change version Search in this p… Search in all products 1. Question: The following RACF® warning appeared on the console: Additionally, the OpenSSH client or server fails with message: FOTS1949 PRNG is not seeded. Please activate the Integrated Cryptographic Service Facility (ICSF). Answer: ICSF is required and must be started with /dev/random support prior to starting OpenSSH. ssh-rand-helper is no longer supported as an alternative. See Using hardware support to generate random numbers for more information. </snippet> I misread ICSF as to meaning , Crypto co-processor card required. ,, duh .. my old age.. Regards and a big thanks again, Sott On Wed, Jul 25, 2018 at 11:54 AM scott Ford <[email protected]> wrote: > Thanks one and all, still digging on what and if we will use SSH for > provisioning we are also considering Restapi. > Never a dull moment. > > Scott > > On Wed, Jul 25, 2018 at 10:48 AM Kirk Wolf <[email protected]> > wrote: > >> Here's a z/OS OpenSSH Kerberos cookbook: >> >> https://dovetail.com/docs/ssh/kerberos_sso.pdf >> >> We also did a SHARE presentation in 2016 on the same topic, but the white >> paper is more complete. >> >> On Wed, Jul 25, 2018 at 9:42 AM, Ed Jaffe <[email protected]> >> wrote: >> >> > On 7/24/2018 1:20 PM, scott Ford wrote: >> > >> >> Do all Z customers run ICSF and the crypto cards ? >> >> >> > >> > No. >> > >> > I read in the z/Os 2.3 >> >> doc that SSH requires the crypto card and ICSF. >> >> >> > >> > ICSF=Yes. Crypto-Card=No. >> > >> > I also found that you can >> >> use Kerberos. If so does Kerberos require the Crypto card ? >> >> >> > >> > No, but if you can actually get Kerberos set up and working I would >> > appreciate if you could put together a layman's "cook book" for doing >> so... >> > >> > -- >> > Phoenix Software International >> > Edward E. Jaffe >> > 831 Parkview Drive North >> > El Segundo, CA 90245 >> > https://www.phoenixsoftware.com/ >> > >> > ------------------------------------------------------------ >> > -------------------- >> > This e-mail message, including any attachments, appended messages and >> the >> > information contained therein, is for the sole use of the intended >> > recipient(s). If you are not an intended recipient or have otherwise >> > received this email message in error, any use, dissemination, >> distribution, >> > review, storage or copying of this e-mail message and the information >> > contained therein is strictly prohibited. If you are not an intended >> > recipient, please contact the sender by reply e-mail and destroy all >> copies >> > of this email message and do not otherwise utilize or retain this email >> > message or any or all of the information contained therein. Although >> this >> > email message and any attachments or appended messages are believed to >> be >> > free of any virus or other defect that might affect any computer system >> > into >> > which it is received and opened, it is the responsibility of the >> recipient >> > to ensure that it is virus free and no responsibility is accepted by the >> > sender for any loss or damage arising in any way from its opening or >> use. >> > >> > >> > ---------------------------------------------------------------------- >> > For IBM-MAIN subscribe / signoff / archive access instructions, >> > send email to [email protected] with the message: INFO IBM-MAIN >> > >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [email protected] with the message: INFO IBM-MAIN >> > -- > Scott Ford > IDMWORKS > z/OS Development > -- *IDMWORKS * Scott Ford z/OS Dev. “By elevating a friend or Collegue you elevate yourself, by demeaning a friend or collegue you demean yourself” www.idmworks.com [email protected] Blog: www.idmworks.com/blog *The information contained in this email message and any attachment may be privileged, confidential, proprietary or otherwise protected from disclosure. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, copying or use of this message and any attachment is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and permanently delete it from your computer and destroy any printout thereof.* ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
