ZOWE and AT-TLS (PAGENT)

Hi! Does ZOWE support AT-TLS for managing its TLS encryption?Can I store the (private) key of the server certificate in ICSF? We have z/OS 2.4 and ZOWE 2.16 Thanks in advance for your help, Juan Mautalen -- For IBM-MAIN subscr

Open SSH vulnerability

Hi! Do we know if CVE-2024-6387 affects Open SSH on z/OS? Thanks, Juan Mautalen -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

TSO PREFIX change

Hi! Is there a way for an administrator to change the TSO PREFIX of another RACF userid? Reason for asking:When a new TSO userid is created, we need to set its TSO PREFIX to a value different from "USERID" (the default). Basically, as we generally dont allow USER datasets, we need to set the TSO

Re: TN3270, EBCDIC and ASCII

Thanks guys for all you instructive answers! As it usually happens when you try to understand something, new questions often arise and you realize that things are fairly more complicated than you initially beleived. Juan --

TN3270, EBCDIC and ASCII

Hi! I want to understand how TN3270 emulation works regarding convertion of characters (between EBCDIC and ASCII, and viceversa). This is how I think it works (more or less), but I am not sure at all. So please let me know about any mistakes. Let suppose that you use a TN3270 emulator program to

PAGENT - Checking syntax

Hi: Is there any command to check for the syntax of a PAGENT policy file? I have heavily edited (a copy)  of our current policy file (without using zOSMF), and it would be great to check for syntax errors before renaming files to make it the active one. I was looking at the PASEARCH command docu

SYSREXX - Max number of tasks (TSO=NO)

Hi: from IBM documentation (z/OS 2.4): << There can be up to 64 REXX worker tasks running TSO=NO execs and up to 8 TSO server address spaces running TSO=YES execs.>> On the other hand, in System Rexx configuration member AXRxx, you have the parameter MAXWORKERTASKS, whose maximum value is 32.  MA

REXXLIB execs naming

Hi: >From IBM documentation, regarding System REXX configuration: >>> I wonder about LAST phrase of the paragraph... We have added a library to REXXLIB concatenation, and a REXX exec starting with I (it is indeed a REXX called IRRPWREX, programmed by Bruce Wells from IBM, but not officially s

Re: [EXT] Re: Counting EXIT invocations

; > 01a0403c5dc1-dmarc-requ...@listserv.ua.edu> wrote: > > > > > Best option would be to have the exit issue a WTO, and then scan > > > operlog for that. > > > > > > Dave Jousma > > > Vice President | Director, Technology Engineering > > > >

Counting EXIT invocations

Hi! We have recently implemented a RACF exit. Is there a way to know how many times this EXIT was executed (on a given period of time)? Thanks in advance for your help, Juan Mautalen -- For IBM-MAIN subscribe / signoff / archive

Re: DUMPs protection question

I agree that UACC(READ) looks like a good setting for IEAABD.DMPAUTH resource protection. However, the RACF_SENSITIVE_RESOURCES health check seems to disagree: (...)E IEAABD.DMPAUTH                          FACILITY Read No    (...) Not a big deal, of course. But I prefer to have RACF health

Re: DUMPs protection question

Thanks Peter for the information. It then seems appropiate to RACF protect IEAABD.DMPAUTH resource. RACF SAG states: <<<>>> Who should have access to IEAABD.DMPAUTH (human/non-human userids)? Regards, Juan MautalenEl martes, 12 de julio de 2022, 09:11:43 p. m. GMT-3, Peter Relson escribió:

DUMPs protection question

Hi! I have a question regarding IEAABD.DMPAUTH / IEAABD.DMPAKEY resources in RACF FACILITY class: 1- In this context, when the RACF "Security Administrator Guide" says "controlled programs", is it referring to programs protected in RACF PROGRAM class? 2- It is not completely clea