On Tue, 7 Oct 2008 12:30:06 -0700, George Fogg [EMAIL PROTECTED] wrote:
On Tue, 7 Oct 2008 13:50:21 -0500, Mark Zelden [EMAIL PROTECTED]
wrote:
On Tue, 7 Oct 2008 14:36:29 -0400, Scott Rowe [EMAIL PROTECTED] wrote:
I make it a point NOT to have a PASSWORD dataset on my sysres. I consulted
at
Hi all,
?
Thanks for all the suggestions.
I have?resolved my problem with the security team.
?
Special thanks to john?and?all for?the valuable suggestion's.?
Regards,
Ram Balaji.S.
(Dying Hard to explore MainFrames)
--
respond to
IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU
To
IBM-MAIN@BAMA.UA.EDU
cc
Subject
Re: PDS Lock
Hi David,
Iam not aware security packages... Is it possible to do it with JCLs... I
mean while creating the PDS itself can we we lock it...?
Regards,
Ram Balaji.S
the VTOC
(but that also requires some authorization - to open the VTOC for update).
:-Original Message-
:From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
:Of Mike Liberatore
:Sent: Saturday, October 11, 2008 4:37 PM
:To: IBM-MAIN@BAMA.UA.EDU
:Subject: Re: PDS Lock
There also ways of bypassing security
Mike Liberatore wrote:
you could zap the FMT-1 dscb for this data set to turn the password
bit off of ourse if you want to
Scott Rowe wrote:
I'm not sure that is completely true, I remember there being an
issue, but I don't remember the details. Not
you could zap the FMT-1 dscb for this data set to turn the password bit
off of ourse if you want to
Scott Rowe wrote:
I'm not sure that is completely true, I remember there being an issue, but I
don't remember the details. Not all datasets were protected by RACF (there
were no GROUPs or
[mailto:[EMAIL PROTECTED] On Behalf
Of Mike Liberatore
Sent: Saturday, October 11, 2008 4:37 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: PDS Lock
you could zap the FMT-1 dscb for this data set to turn the password bit
off of ourse if you want to
Scott Rowe wrote:
I'm not sure that is completely true, I
for delayed response.
Regards,
Ram Balaji.S.
(Dying Hard to explore MainFrames)
-Original Message-
From: John McKown [EMAIL PROTECTED]
To: IBM-MAIN@BAMA.UA.EDU
Sent: Tue, 7 Oct 2008 6:08 pm
Subject: Re: PDS LOCk
On Tue, 7 Oct 2008, Anton Britz wrote:
Hi Ram,
Do not get confused with all
Ram,
I was also in the Outsourcing business for 10 years so here comes my opinion :
a) You have to speak/find the Software support staff for the Computer that
you are working on
b) Tell them what you want to do and then ask them, what do they think you
should do.
They would help you, if only
snip
And if your image has an OMVS segment, does that not
Imply that a Security package is present.
unsnip
Or If a SAF solution isn't available to the originator means that the
user can not get a SAF profile for his DSN
Jack Kelly
202-502-2390 (Office)
)
-Original Message-
From: John McKown [EMAIL PROTECTED]
To: IBM-MAIN@BAMA.UA.EDU
Sent: Tue, 7 Oct 2008 6:08 pm
Subject: Re: PDS LOCk
On Tue, 7 Oct 2008, Anton Britz wrote:
Hi Ram,
Do not get confused with all these technical discussions that you received
but
lets start at the very
I cant ask SAF to Protect since its my training dataset.
Why can't you?
You can protect it from everybody, very easily.
-
Too busy driving to stop for gas!
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send
Message-
From: Ted MacNEIL [EMAIL PROTECTED]
To: IBM-MAIN@BAMA.UA.EDU
Sent: Wed, 8 Oct 2008 11:40 am
Subject: Re: PDS LOCk
I cant ask SAF to Protect since its my training dataset.
Why can't you?
You can protect it from everybody, very easily.
-
Too busy driving to stop for gas
Did you try the ADDSD command? That will only work if: (1) your system
uses RACF and (2) the dataset(s) in question start with your RACF id. This
should work unless your system is secured in a truly extreme way.
ADDSD 'myracfid.*.**' UACC(NONE)
Replace 'myracfid' with your RACF (TSO) id and
I cant ask because people who are using are also working for same client, But
different team(say level)?
If (hopefully) they are using different ID's, connect them to a group that has
access to the PDS.
And, remove their access when no longer needed.
and moreover these are training
On Wed, 8 Oct 2008 18:53:48 +, Ted MacNEIL [EMAIL PROTECTED] wrote:
I cant ask because people who are using are also working for same client,
But different team(say level)?
If (hopefully) they are using different ID's, connect them to a group that
has access to the PDS.
And, remove their
On Wed, 8 Oct 2008 06:49:09 -0400, Jack Kelly
[EMAIL PROTECTED] wrote:
...If a SAF solution isn't available to the originator means that the
user can not get a SAF profile for his DSN
...
Something doesn't make sense to me here. If a SAF solution isn't
available means a SAF product isn't
snip
Or could the original poster be trying to restrict access to data
that is, by law or by corporate dictate, not to be limited? (I'm not
sure such a thing exists.)
Pat O'Keefe
HIPAA data is restricted by US law. PCI data is restricted by something
(industry requirement? Law?).
--
John
The short answer, for an application programmer, is No.
In the mainframe world, security is taken very seriously and is not
left in the hands of the programmer creating the data set. (I am
assuming that you *are* a newcomer, else you would be familiar with at
least one of RACF, ACF2 and Top
Oops..Sorry. This reply was to the OPI snipped too much
On Wed, Oct 8, 2008 at 5:17 PM, Don Leahy [EMAIL PROTECTED] wrote:
The short answer, for an application programmer, is No.
In the mainframe world, security is taken very seriously and is not
left in the hands of the programmer
-
From: John McKown
To: IBM-MAIN@BAMA.UA.EDU
Sent: Tue, 7 Oct 2008 6:08 pm
Subject: Re: PDS LOCk
On Tue, 7 Oct 2008, Anton Britz wrote:
Hi Ram,
Do not get confused with all these technical discussions that you received
but
lets start at the very beginning
it.
Regards,
Ram Balaji.S.
(Dying Hard to explore MainFrames)
-Original Message-
From: Linda Mooney [EMAIL PROTECTED]
To: IBM-MAIN@BAMA.UA.EDU
Sent: Wed, 8 Oct 2008 2:58 pm
Subject: Re: PDS LOCk
Hi Ram,
I have been reading your posts and the replies. Could answer a few questions
for me?
1
-Ursprungligt meddelande-
Från: IBM Mainframe Discussion List
[mailto:[EMAIL PROTECTED] För Ted MacNEIL
Skickat: den 8 oktober 2008 20:54
Till: IBM-MAIN@BAMA.UA.EDU
Ämne: Re: PDS LOCk
I cant ask because people who are using are also working for
same client, But different team
HI all,
Can anyone say how to lock a PDS. All the members of my PDS are sensitive can I
lock them with password
Please help me.
Regards,
Ram Balaji.S
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send
Lindy Mayfield
This is a curious question...
-Original Message-
From: Lindy Mayfield [EMAIL PROTECTED]
To: IBM-MAIN@BAMA.UA.EDU
Sent: Tue, 7 Oct 2008 10:25 am
Subject: Re: PDS Lock
What utility is used to password protect a dataset? That's one thing
I've never seen in over 20
On Tue, 7 Oct 2008 13:24:24 -0400, Ram Balaji [EMAIL PROTECTED] wrote:
Hi David,
Iam not aware security packages... Is it possible to do it with JCLs... I
mean while creating the PDS itself can we we lock it...?
Regards,
Ram Balaji.S
Basically, no. If you have a security package, then that is
On Tue, 7 Oct 2008 12:31:08 -0500, Cebell, David [EMAIL PROTECTED] wrote:
It is difficult to imagine a shop without some type of security package.
That said,
You may want to look at the LABEL Parameter of the DD Statement.
Probably won't work anymore. It requires that a special dataset, named
Forgot to mention that my solution with the ADDSD only works on a RACF
protected system. I don't know Top Secret or ACF2.
--
John
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED]
On Tue, 7 Oct 2008 19:25:10 +0200, Lindy Mayfield
[EMAIL PROTECTED] wrote:
What utility is used to password protect a dataset? That's one thing
I've never seen in over 20 years.
The TSO PROTECT command updates the PASSWORD dataset. It is so old that I
doubt that any system actually uses it any
managed datasets.
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of John Eells
Sent: 7. lokakuuta 2008 20:48
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: PDS Lock
Lindy Mayfield wrote:
What utility is used to password protect a dataset? That's
Sent: 7. lokakuuta 2008 20:48
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: PDS Lock
Lindy Mayfield wrote:
What utility is used to password protect a dataset? That's one thing
I've never seen in over 20 years.
snip
I thought at one point that password protection was completely withdrawn
(not only
On Tue, 7 Oct 2008 19:25:10 +0200, Lindy Mayfield
[EMAIL PROTECTED] wrote:
What utility is used to password protect a dataset? That's one thing
I've never seen in over 20 years.
The TSO PROTECT command (TSO HELP PROTECT). It is ignored on
RACF systems (and Top Secret) but still works on ACF2
On Tue, 7 Oct 2008 14:36:29 -0400, Scott Rowe [EMAIL PROTECTED] wrote:
I make it a point NOT to have a PASSWORD dataset on my sysres. I consulted
at a shiop a few years ago that had one, and it was a PITA, since they were
securing some datasets with password, and others using RACF, believe it or
On Tue, 7 Oct 2008 13:47:44 -0400, John Eells [EMAIL PROTECTED] wrote:
snip
(There's more...but nobody rational uses password protection any more.)
I know of 2 ACF2 shops that use them. I don't know about rational, but
when I asked why the sysprog told me he liked the extra prompt before
On Tue, 7 Oct 2008 13:50:21 -0500, Mark Zelden [EMAIL PROTECTED] wrote:
On Tue, 7 Oct 2008 14:36:29 -0400, Scott Rowe [EMAIL PROTECTED] wrote:
I make it a point NOT to have a PASSWORD dataset on my sysres. I consulted
at a shiop a few years ago that had one, and it was a PITA, since they were
Another possibility is to write a program to encrypt the PDS so that
no one else can make sense out of it.
Of course, anyone who looks at the PDS may think it is corrupted, and
delete it out from under you. :-)
--
For IBM-MAIN
snip
... how to protect my PDS ...
unsnip
If a SAF solution isn't available to the originator, I would suggest that
the originator look into a SCLM methodology since (s)he seems to be more
applications orientated. And if at 1.9, s(he) could use OMVS as the
repository and use ACL and UNIX
On Tue, 7 Oct 2008 15:32:16 -0400, Jack Kelly [EMAIL PROTECTED]
wrote:
snip
... how to protect my PDS ...
unsnip
If a SAF solution isn't available to the originator, I would suggest that
the originator look into a SCLM methodology since (s)he seems to be more
applications orientated. And if at
I'm not sure that is completely true, I remember there being an issue, but I
don't remember the details. Not all datasets were protected by RACF (there
were no GROUPs or profiles for most HLQs), so that might have had something to
do with it.
Do you have a reference for PASSWORD protection
That makes sense, and matches the configuration I remember.
Walt Farrell [EMAIL PROTECTED] 10/7/2008 3:16 PM
On Tue, 7 Oct 2008 13:50:21 -0500, Mark Zelden [EMAIL PROTECTED] wrote:
On Tue, 7 Oct 2008 14:36:29 -0400, Scott Rowe [EMAIL PROTECTED] wrote:
I make it a point NOT to have a PASSWORD
And if your image has an OMVS segment, does that not
Imply that a Security package is present.
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of John McKown
Sent: Tuesday, October 07, 2008 3:07 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: PDS Lock
On Tue, 7 Oct 2008 16:25:23 -0400, Scott Rowe [EMAIL PROTECTED] wrote:
Do you have a reference for PASSWORD protection being ignored?
Already posted by George Fogg.
http://bama.ua.edu/cgi-bin/wa?A2=ind0810L=ibm-mainD=1amp;O=DF=S=P=39162
But that conflicts with what Walt wrote (sort of).
Hi Ram,
Do not get confused with all these technical discussions that you received but
lets start at the very beginning :
a) Are you a User , a Systems programmer or just a programmer
b) If you say sensitive data .. what do you mean by that
c) Who should be able to see this data ? ex. Only
On Tue, 7 Oct 2008, Anton Britz wrote:
Hi Ram,
Do not get confused with all these technical discussions that you received
but
lets start at the very beginning :
a) Are you a User , a Systems programmer or just a programmer
For some reason, I just ASSuMEd that he was likely a
44 matches
Mail list logo
