Hi, John... While DIRMAINT does provide some features of an ESM (expiring passwords, password checking, etc.), being a security manager is not its main reason for being. In the z/VM environment, RACF (and other 3rd party vendor products like ACF2) provide the ESM functionality needed, while DIRMAINT concentrates on directory management.
I would recommend that any site that is planning on deploying z/VM in anything other than a trivial configuration install and use a directory management product of some sort, like DIRMAINT. Attempting to manage the CP user directory 'by hand' can lead to the sort of directory errors that can be difficult to overcome (overlapping minidisk definitions being a prime example....) Plus, DIRMAINT now has capabilities to quickly create and clone user ids, ideal for working with colonies of penguins. Have a good one. Andy Robertson wrote:
we are activating RACFVM to supply necessary security for our VM systems. There is some debate as to whether it is worth activating DIRMAINT as well. We only have a few users who ever update the directory and it is questioned as to whether the extra complexity of DIRMAINT with its attendant overheads and possible system fragility is worth the small increment in security it seems could provide. Is there a preexisting consensus on this matter? ********************************************************************** This email is confidential and may contain copyright material of the John Lewis Partnership. If you are not the intended recipient, please notify us immediately and delete all copies of this message. (Please note that it is your responsibility to scan this message for viruses). Email to and from the John Lewis Partnership is automatically monitored for operational and lawful business reasons. ********************************************************************** John Lewis plc Registered in England 233462 Registered office 171 Victoria Street London SW1E 5NN Websites: http://www.johnlewis.com http://www.waitrose.com http://www.greenbee.com http://www.johnlewispartnership.co.uk ********************************************************************** ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
-- DJ V/Soft z/VM and mainframe Linux expertise, training, consulting, and software development www.vsoft-software.com ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390