Hi, John...

While DIRMAINT does provide some features of an ESM (expiring passwords, 
password
checking, etc.), being a security manager is not its main reason for being. In 
the z/VM
environment, RACF (and other 3rd party vendor products like ACF2) provide the 
ESM
functionality needed, while DIRMAINT concentrates on directory management.

I would recommend that any site that is planning on deploying z/VM in anything 
other than
a trivial configuration install and use a directory management product of some 
sort, like
DIRMAINT. Attempting to manage the CP user directory 'by hand' can lead to the 
sort of
directory errors that can be difficult to overcome (overlapping minidisk 
definitions being
a prime example....) Plus, DIRMAINT now has capabilities to quickly create and 
clone user
ids, ideal for working with colonies of penguins.

Have a good one.

Andy Robertson wrote:
we are activating RACFVM to supply necessary security for our VM systems.

There is some debate as to whether it is worth activating DIRMAINT as well.

We only have a few users who ever update the directory and it is questioned
as to whether the extra complexity of DIRMAINT with its attendant overheads
and possible system fragility is worth the small increment in security it
seems could provide.

Is there a preexisting consensus on this matter?

**********************************************************************
This email is confidential and may contain copyright material of the John Lewis 
Partnership.
If you are not the intended recipient, please notify us immediately and delete 
all copies of this message.
(Please note that it is your responsibility to scan this message for viruses). 
Email to and from the
John Lewis Partnership is automatically monitored for operational and lawful 
business reasons.
**********************************************************************

John Lewis plc
Registered in England 233462
Registered office 171 Victoria Street London SW1E 5NN

Websites: http://www.johnlewis.com
http://www.waitrose.com
http://www.greenbee.com
http://www.johnlewispartnership.co.uk

**********************************************************************

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

--
DJ

V/Soft
  z/VM and mainframe Linux expertise, training,
  consulting, and software development
www.vsoft-software.com

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to