Alan:
Unless I am misreading things, wouldn't CP Exit 1101: Logon
Post-Parse Processing do exactly what he needs? He would have a list of
acceptable users in the exit, if it is any of them, he would change the
return code. Sound too simple?
David Wakser
-----Original Message-----
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Alan Altmark
Sent: Monday, November 24, 2008 9:54 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: LOGONBY - limit of 8 userids.
On Monday, 11/24/2008 at 08:01 EST, David Kreuter
<[EMAIL PROTECTED]> wrote:
> The LOGONBY statement in the directory is limited to 8 users. I have
> a
client
> that wants to have, say, 16 in the list.
> The system is fairly knuckle scraping, i.e., no RACF, DIRMAINT,
products,
> etc. This isn't helping, as if DIRMAINT was there we could do a
dynamic
> directory update.
>
> I have thought of a command exit, or even a class C or E service
machine that
> zaps storage. But I'm too old for zapping storage ...
> ... at least in production systems.
>
> Any ideas?
The limit's not in CP code, but in the object directory. That's
something that isn't changed trivially, requiring you to recompile any
part of the system that references the directory. Good news: I think
the code that abends the system doesn't reference the directory.
That's, like, two modules you don't have to compile! :-)
You'll have to drop back to your client's security policy for guidance.
Security is not free, so if they MUST have LOGON BY with more than 8
byusers, then they MUST purchase an ESM. Of course, you could write an
ESM for them, but that will cost them a boatload of money and take a
while to complete, not to mention the ongoing cost of your support.
Alan Altmark
z/VM Development
IBM Endicott
