Re: RACF and TSS in the Parallel Sysplex

2011-06-16 Thread Schumacher, Otto
We used the Vanguard Corporation to help with a project to convert one site's CA-TSS security to RACF. We also used the same corporation to convert another site from CA-ACF2 to RACF. We also use the Vanguard Security Administration and Reporting products to enhance the RACF sec

Re: RACF and TSS in the Parallel Sysplex

2011-06-16 Thread Rob Schramm
Thu, 16 Jun 2011 10:33:48 -0400, Perry Mayes GRC.GC.CA> wrote: > >> >>Has anyone done this with success? >> >>Thanks >> > I worked with a previous installation that had a mixture of RACF and TSS > systems in a sysplex with no problems.   Granted, this w

Re: RACF and TSS in the Parallel Sysplex

2011-06-16 Thread Dana Mitchell
On Thu, 16 Jun 2011 10:33:48 -0400, Perry Mayes wrote: > >Has anyone done this with success? > >Thanks > I worked with a previous installation that had a mixture of RACF and TSS systems in a sysplex with no problems. Granted, this was a 'Bronzeplex' by IBM'

Re: RACF and TSS in the Parallel Sysplex

2011-06-16 Thread Hal Merritt
perhaps the real issue is that a knowledgeable auditor will burn you but good. They'd argue that shared dasd needs to be protected by a shared security database. The good news is that the two are close enough that conversion from TSS to RACF is not that bad. IMNSHO: pick one. -

Re: RACF and TSS in the Parallel Sysplex

2011-06-16 Thread Scott Rowe
parallel sysplex secured with TSS. We want to > introduce a 4th machine into the plex which will essentially be a DB2 > server. In order to keep costs manageable we will be running our IBM > software using the zNALC license model including RACF. > > Has anyone done this

RACF and TSS in the Parallel Sysplex

2011-06-16 Thread Perry Mayes
Good day: We are running a 3 system parallel sysplex secured with TSS. We want to introduce a 4th machine into the plex which will essentially be a DB2 server. In order to keep costs manageable we will be running our IBM software using the zNALC license model including RACF. Has anyone

Re: TSS (Transaction Security System)

2010-07-13 Thread Anne & Lynn Wheeler
joa...@swbell.net (John McKown) writes: > TSS could be Top Secret Security - a replacement for RACF from CA. It is > still an active product. CA could likely tell you more. > > Could you possibly mean TSS/360? It was an IBM operating system for the > S/360. There was also a TSS/37

Re: TSS (Transaction Security System)

2010-07-13 Thread John McKown
On Tue, 2010-07-13 at 14:01 +0200, Miklos Szigetvari wrote: > Hi > > If some help me to find something about TSS > (I find only some very old descriptions) > TSS could be Top Secret Security - a replacement for RACF from CA. It is still an active product. CA could likely tell y

Re: TSS (Transaction Security System)

2010-07-13 Thread Kelman, Tom
The TSS I know about is also known as TopSecret. It is a Computer Associates product. You should be able to get the information on the latest release here - http://www.ca.com/us/products/product.aspx?id=141. CA also has the product ACF2. Both TopSecret and ACF2 are products that replace RACF

TSS (Transaction Security System)

2010-07-13 Thread Miklos Szigetvari
Hi If some help me to find something about TSS (I find only some very old descriptions) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO

Sec:Tool for TSS for z/OS Announcement

2010-03-12 Thread John P. Baker
HFD Technologies is pleased to announce the availability of Sec:Tool for TSS for z/OS. Sec:Tool is a CICS-based challenge-response system providing end-users the capability to reset their passwords and to remove threshold suspensions without any invention on the part of your corporate help

RACF/TSS reporting (was RE: Security Packages Percentages)

2007-04-10 Thread Anthony Saul Babonas
Bah humbug redux! Same mediocre programmer needed (me again). Slight twist in that the security system outsources the data store to SMF. Trivial for Top Secret, merely easy in RACF. Did it last night, in the dark hours.Fortunately our auditors only work in the daylight, but other interest

Re: z/OS 1.8, TSS 9.0 and ALLOWUSERKEYCSA(NO)

2007-02-26 Thread Russell Witt
.EDU Subject: Re: z/OS 1.8, TSS 9.0 and ALLOWUSERKEYCSA(NO) Oops, that should have been ALLOWUSERKEYCSA(NO) Fixing subject for accuracy. Does anyone have the above combination working? We are just kicking the tires of z/OS 1.8 in one of our sandboxes, and it seems as though TSS 9 has problems if

Re: z/OS 1.8, TSS 9.0 and ALLOWUSERKEYCSA(NO)

2007-02-26 Thread Jousma, David
Oops, that should have been ALLOWUSERKEYCSA(NO) Fixing subject for accuracy. Does anyone have the above combination working? We are just kicking the tires of z/OS 1.8 in one of our sandboxes, and it seems as though TSS 9 has problems if ALLOWUSERKEYCSA(NO) is set in DIAG00. I find it somewhat

z/OS 1.8, TSS 9.0 and ALLOWUSERKEY(NO)

2007-02-26 Thread Jousma, David
Does anyone have the above combination working? We are just kicking the tires of z/OS 1.8 in one of our sandboxes, and it seems as though TSS 9 has problems if ALLOWUSERKEY(NO) is set in DIAG00. I find it somewhat hard to believe, but I guess I am not surprised. I did a quick search on ca&#

Re: What facilties or conventions for ACF2 and TSS like RACF exit daisy-chaining?

2006-06-12 Thread Tony Harminc
Last week Jim Keohane of Multi-Platforms, Inc. wrote: >Doess TSS or ACF2 have facilities to allow multiple > modules to be daisy-chained when an exit in invoked? > >If no facilities are there any popular conventions for doing same? > >This would be for the case

What facilties or conventions for ACF2 and TSS like RACF exit daisy-chaining?

2006-06-05 Thread Jim Keohane (MPI)
Hi Folks, Doess TSS or ACF2 have facilities to allow multiple modules to be daisy-chained when an exit in invoked? If no facilities are there any popular conventions for doing same? This would be for the case where a vendor and the customer (or multiple vendors) supply the same exit

Re: R_Admin/IRRSEQ00 and non-IBM External Security Products (ACF2, TSS)

2006-02-24 Thread Walt Farrell
On 2/24/2006 12:46 PM, Jim Keohane wrote: Has anyone heard of R_Admin/IRRSEQ00 invoking ACF2 or TSS at least for just a TSO admin command via function code ADMN_RUN_COMD? R_Admin/IRRSEQ00 is a SAF Callable Service. The SAF implies some standard usage across different ESM's (ext

R_Admin/IRRSEQ00 and non-IBM External Security Products (ACF2, TSS)

2006-02-24 Thread Jim Keohane
Has anyone heard of R_Admin/IRRSEQ00 invoking ACF2 or TSS at least for just a TSO admin command via function code ADMN_RUN_COMD? R_Admin/IRRSEQ00 is a SAF Callable Service. The SAF implies some standard usage across different ESM's (external security managers) like RACF, ACF2

CA-TSS R8 and CICS 4.1

2006-01-11 Thread Kreiter, Chuck
Anyone successfully using CA's TSS release 8 with the old, unsupported CICS 4.1? We are trying to upgrade to z/OS 1.7 and found that TSS release 8 is required for z/OS 1.7. However, we have been told that TSS release 8 will not work with CICS 4.1. Thanks, Chuck Kreiter Lead Sy

Re: TSS PRIVPGM in RACF

2005-12-12 Thread Barry Schwarz
I don't know what TSS option 14 and PRIVPGM are but the following may help. RACF enforces program control via two mechanisms: One mechanism is data set access. In order to execute a program, the user must have at least execute access to the library that the program resid

TSS PRIVPGM in RACF

2005-12-12 Thread Josan Cardenosa
Hello all, We're a TSS shop with option 14 configured. That means that our PRIVPGM programs can be executed from linklist or any other library if no LIB() parameter is especified. We're considering to switch off option 14. Then, all PRIVPGM programs without LIB(), only will be

Re: TSS

2005-05-25 Thread Shmuel Metz (Seymour J.)
In <[EMAIL PROTECTED]>, on 05/24/2005 at 12:00 AM, Ted MacNEIL <[EMAIL PROTECTED]> said: >Subject: TSS To some of us, TSS refers to software a good deal older than CA. Google for "360/67". -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see &l

TSS

2005-05-24 Thread Ted MacNEIL
... In the vein of Juan's much missed queries, how did TSS come about??? ... There was a discussion a couple of months ago on this. DataCrown, then CrownTech, then DataCrown, then ISM, then IGS, all in Canada. A few SYSPROGs wrote a security system called ACCESS. It, in general, used