FCXLON679E Unable to authenticate user uuuuu from 10.54.11.28:04192

2008-06-18 Thread Knutson, Sam
Hi,

Does anyone know if the requirement for the web login screen for the
Performance Toolkit to improve handling of users with expired passwords
has been raised?

If you have a user who has been defined to RACF but the password has
expired they cannot login through the web interface to Performance
Toolkit.  They get FCXLON679E Unable to authenticate user u from
10.54.11.28:04192

This does not tell you your password is expired or give the opportunity
to enter a new password.  I was able to have them login through VM/CMS
and once they changed the password it worked fine.  It would have been
nice to at least get a better message.  Ideally they could have changed
the expired password through the web interface.

Best Regards, 

Sam Knutson, GEICO 
System z Performance and Availability Management 
mailto:[EMAIL PROTECTED] 
(office)  301.986.3574  

"Think big, act bold, start simple, grow fast..." 







This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.


HOWTO: Allow access without authentication from web interface to z/VM Performance Toolkit with RACF & z/VM 5.3?

2008-06-05 Thread Knutson, Sam
Hi,

Coming from a z/OS background I have the RMF Data Portal deployed and we
allow anyone inside our network to view it.  I would like to deploy the
z/VM Performance Toolkit web interface in the same way.  I cannot find
anyway to allow this.

In RMF DDS SYS1.PARMLIB(GPMSRV00)

/*   */
/* - HTTP_NOAUTH specifies the host names/IP addresses that can use  */
/*   the HTTP interface without authentification (userid/password).  */
/*   Wildcards * and ? are allowed. More than one HTTP_NOAUTH*/
/*   may be present. */
/*   Note: The host running the RMF CIM provider or RMF LDAP backend */
/* must be specified here.   */
/*   Examples: HTTP_NOAUTH(sysa.boeblingen.ibm.com)  */
/*   Default:  HTTP_NOAUTH() */
/*   */
/*/
MAXSESSIONS_HTTP(20)/* MaxNo of concurrent HTTP requests */
HTTP_PORT(8803) /* Port number for HTTP requests */
HTTP_ALLOW(*)   /* Mask for hosts that are allowed   */
HTTP_NOAUTH(*)  /* GEICO allow public use of RMF DDS */

The Performance Toolkit documentation talks about identify yourself as a
mandatory step.

Is there any way to accomplish this or has anyone already requested this
as an enhancement?

Best Regards, 

Sam Knutson, GEICO 
System z Performance and Availability Management 
mailto:[EMAIL PROTECTED] 
(office)  301.986.3574  

"Think big, act bold, start simple, grow fast..." 




This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.