To me, it's not about security -- it's about keeping the CP directory and the RACF database in sync, which DIRMAINT will do with RACF as long as you leave the suggested user exits in place. I'd suppose that you could implement manual processes that could ensure the synchronization of both databases; but they'd be awfullly tedious and error-prone.
--Jim--
From: Andy Robertson <[EMAIL PROTECTED]>
To: LINUX-390@VM.MARIST.EDU
Date: 10/13/2008 09:44 AM
Subject: DIRMAINT necessary with RACFVM?
we are activating RACFVM to supply necessary security for our VM systems.
There is some debate as to whether it is worth activating DIRMAINT as well.
We only have a few users who ever update the directory and it is questioned
as to whether the extra complexity of DIRMAINT with its attendant overheads
and possible system fragility is worth the small increment in security it
seems could provide.
Is there a preexisting consensus on this matter?
**********************************************************************
This email is confidential and may contain copyright material of the John
Lewis Partnership.
If you are not the intended recipient, please notify us immediately and
delete all copies of this message.
(Please note that it is your responsibility to scan this message for
viruses). Email to and from the
John Lewis Partnership is automatically monitored for operational and
lawful business reasons.
**********************************************************************
John Lewis plc
Registered in England 233462
Registered office 171 Victoria Street London SW1E 5NN
Websites: http://www.johnlewis.com
http://www.waitrose.com
http://www.greenbee.com
http://www.johnlewispartnership.co.uk
**********************************************************************
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
<<inline: graycol.gif>>
<<inline: ecblank.gif>>
