If you google z/osmf top secret or racf or acf2 it will bring you to a CA webpage. And the jobs are in a SMP/e library
-----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Carmen Vitullo Sent: Wednesday, April 17, 2019 12:58 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z?OSMF I am in the same boat here - clear as mud Carmen Vitullo ----- Original Message ----- From: "David Jousma" <000001a0403c5dc1-dmarc-requ...@listserv.ua.edu> To: IBM-MAIN@LISTSERV.UA.EDU Sent: Wednesday, April 17, 2019 12:23:46 PM Subject: Re: z?OSMF I found, and downloaded the cookbook too. Again, fine for setting up the STC security, but trying to figure out some level of role based functionality, and who should see what, is the hard part. -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Carmen Vitullo Sent: Wednesday, April 17, 2019 9:13 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z?OSMF **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** TSS here also, and luckily my TSS sysprog has been able to either find the TSS cookbook for z/osmf security setup or has been able to translate RACF to TSS, I agree, still a mess to setup correctly. still getting issues with some 2.2 security setup due to the security group does not understand the required setup and refuses to complete the security setup because of these issues. Carmen Vitullo ----- Original Message ----- From: "Steve Beaver" <st...@stevebeaver.com> To: IBM-MAIN@LISTSERV.UA.EDU Sent: Wednesday, April 17, 2019 8:06:55 AM Subject: Re: z?OSMF The shop where we are installing z/OSMF is CA-TSS also. That makes it a mild mess to setup. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jousma, David Sent: Wednesday, April 17, 2019 6:11 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z?OSMF Yea, I should have been a bit clearer. Security setup for the actual STC's is not unreasonable. It's trying to determine the correct access for various levels of security for different role types (general user, sysprog, sysprog admin, etc). The other is that zOSMF requires bits of operating system pieces that we hadn’t previously configured (CIM, CEA, etc), that we are still working the bugs out of. We are a CA-TSS shop too. -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Jim Taylor Sent: Wednesday, April 17, 2019 6:59 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: z?OSMF **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** IMHO the security set-up really isn't that bad now. There are multiple SAMPLIB jobs for each function/plugin so it's far, far easier than the old shell script way. I had the basic security set-up carried out within minutes - the worst bit was changing all the SAMPLIB jobs to stick an OWNER on the CONNECT and RDEFINE RACF commands :) Jim On Wed, 17 Apr 2019 10:03:26 +0000, Jousma, David <david.jou...@53.com> wrote: >Marshall, That's all we use it for at this point too. IMHO, they have fixed >the installation issues, but the security setup payload is so overwhelming >that it may never see the light of day here. > >-----Original Message----- >From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On >Behalf Of Marshall Stone >Sent: Tuesday, April 16, 2019 3:49 PM >To: IBM-MAIN@LISTSERV.UA.EDU >Subject: Re: z?OSMF > >**CAUTION EXTERNAL EMAIL** > >**DO NOT open attachments or click on links from unknown senders or >unexpected emails** > >I use configuration assistant very often to maintain Policy Agent >configs (IPSec TLSv12, IDS, etc) > >Regards, >Marshall Stone >-----Original Message----- >From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On >Behalf Of Steve Beaver >Sent: Tuesday, April 16, 2019 3:37 PM >To: IBM-MAIN@LISTSERV.UA.EDU >Subject: z?OSMF > >z/OSMF to say it mildly is a lot to configure. > > > >Is anyone getting any use of z/OSMF other than a lot of work > > > >TIA > > >Steve > > > > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, send email to >lists...@listserv.ua.edu with the message: INFO IBM-MAIN This message >(including any attachments) is intended only for the use of the individual or >entity to which it is addressed and may contain information that is >non-public, proprietary, privileged, confidential, and exempt from disclosure >under applicable law or may constitute as attorney work product. If you are >not the intended recipient, you are hereby notified that any use, >dissemination, distribution, or copying of this communication is strictly >prohibited. If you have received this communication in error, notify us >immediately by telephone and (i) destroy this message if a facsimile or (ii) >delete this message immediately if this is an electronic communication. Thank >you. > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, send >email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >**CAUTION EXTERNAL EMAIL** > >**DO NOT open attachments or click on links from unknown senders or >unexpected emails** > > >This e-mail transmission contains information that is confidential and may be >privileged. It is intended only for the addressee(s) named above. If you >receive this e-mail in error, please do not read, copy or disseminate it in >any manner. If you are not the intended recipient, any disclosure, copying, >distribution or use of the contents of this information is prohibited. Please >reply to the message immediately by informing the sender that the message was >misdirected. After replying, please erase it from your computer system. Your >assistance in correcting this error is appreciated. > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, send >email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
