Personally, I think you should and it not a big deal of having userids defined on both database When I used to support VM, I have more VM userids then LIUNX guests. Later on you need to manage many minidisks... you may need DATAMOVE James Tison <[EMAIL PROTECTED] m> To Sent by: Linux LINUX-390@VM.MARIST.EDU on 390 Port cc <[EMAIL PROTECTED] IST.EDU> Subject Re: DIRMAINT necessary with RACFVM? 10/13/2008 10:29 AM Please respond to Linux on 390 Port <[EMAIL PROTECTED] IST.EDU> To me, it's not about security -- it's about keeping the CP directory and the RACF database in sync, which DIRMAINT will do with RACF as long as you leave the suggested user exits in place. I'd suppose that you could implement manual processes that could ensure the synchronization of both databases; but they'd be awfullly tedious and error-prone. --Jim-- From: Andy Robertson <[EMAIL PROTECTED]> To: LINUX-390@VM.MARIST.EDU Date: 10/13/2008 09:44 AM Subject: DIRMAINT necessary with RACFVM? we are activating RACFVM to supply necessary security for our VM systems. There is some debate as to whether it is worth activating DIRMAINT as well. We only have a few users who ever update the directory and it is questioned as to whether the extra complexity of DIRMAINT with its attendant overheads and possible system fragility is worth the small increment in security it seems could provide. Is there a preexisting consensus on this matter? ********************************************************************** This email is confidential and may contain copyright material of the John Lewis Partnership. If you are not the intended recipient, please notify us immediately and delete all copies of this message. (Please note that it is your responsibility to scan this message for viruses). Email to and from the John Lewis Partnership is automatically monitored for operational and lawful business reasons. ********************************************************************** John Lewis plc Registered in England 233462 Registered office 171 Victoria Street London SW1E 5NN Websites: http://www.johnlewis.com http://www.waitrose.com http://www.greenbee.com http://www.johnlewispartnership.co.uk ********************************************************************** ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 (Embedded image moved to file: pic19770.gif)(Embedded image moved to file: pic19022.gif) Visit our website at http://www.nyse.com **************************************************** Note: The information contained in this message and any attachment to it is privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to the message, and please delete it from your system. Thank you. NYSE Euronext, Inc. ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
<<attachment: pic19770.gif>>
<<attachment: pic19022.gif>>