On Tue, Sep 23, 2008 at 6:05 AM, Martin, Terry R. (CMS/CTR) (CTR)
[EMAIL PROTECTED] wrote:
So the only thing you are buying here is that you keep TCPMAINT password
secret is that the whole idea behind LOGOnBY? So then you only add
certain user ids to do LOGONBY for this user id correct?
So the only thing you are buying here is that you keep TCPMAINT
password
secret is that the whole idea behind LOGOnBY? So then you only add
certain user ids to do LOGONBY for this user id correct?
Think of it more as a role: you are assuming the role of TCPMAINT, using
your own login
And it makes it easy to revoke privileges from a user: just remove the
LOGONBY authority. This is handy in an environment where roles change
frequently. And if the person leaves or retires, deleting the User ID
takes care of all access, without scrambling to remember which
seldom-used accounts
Not mentioned yet. If using RACF, when you define the user as
LOGONBY, it can by default no longer be logged on to with its own
password (what is normally what you'd want). But, with an extra
command you can restore that possibility:
1. Define VMUTIL as LOGONBY
RAC RDEFINE SURROGAT
Is LOGONBY a RACF thing or z/VM???
T.y.
Graves Nora E [EMAIL PROTECTED] 9/23/2008 8:59 AM
And it makes it easy to revoke privileges from a user: just remove the
LOGONBY authority. This is handy in an environment where roles change
frequently. And if the person leaves or retires, deleting
On Tue, Sep 23, 2008 at 3:33 PM, Howard Rifkind [EMAIL PROTECTED] wrote:
Is LOGONBY a RACF thing or z/VM???
It is easier with RACF, but CP also has directory statements that support it.
Rob
Howard Rifkind wrote:
Is LOGONBY a RACF thing or z/VM???
T.y.
No, it is not a RACF thing...it's part of the native CP user facilities. It can be used
with RACF, or your ESM of choice.
Graves Nora E [EMAIL PROTECTED] 9/23/2008 8:59 AM
And it makes it easy to revoke privileges
On Tue, Sep 23, 2008 at 3:27 PM, Kris Buelens [EMAIL PROTECTED] wrote:
I never set tis up for a user like VMUTIL, but only to be able to
logon to my colleague's userid with my password when he was on
vacation (and a alike for my user when I was on vacation).
And that's exactly why you should
One thing not mentioned by others (unless I missed it) - if you have
VM:Secure for your ESM, if you use logonby to log on to a userid, say
ALAN for purposes of discussion, and try to use VM:Secure to change any
of the security settings, you must give the logged on machine's password
in response
Terry,
LOGONBY has been around for many VM releases. We set all our service
machine accounts and important maintenance ids (MAINT, TCPMAINT, etc)
up with a LOGONBY list. Then we change those ids' passwords to
LBYONLY, which says the userid can only be logged on using LOGONBY. So
if you try and
It's controllable by RACF, but is part of CP (finally).
Is LOGONBY a RACF thing or z/VM???
LOGONBY has been a part of CP since before VM/ESA 2.3 (1998). It is not mentioned in the Quick
Reference for VM/SP 6 (1988) so it was added between 1988 and 1998. It has been around a long time.
Maybe even longer that RACF. (I don't know when it was introduced on VM.)
David Boyes wrote:
It’s
Before VM got LOGONBY, IBM had internally a RACF modification that
allowed a Logon By, for ages. Obviously, CP was not aware of the
LOGONBY, (so no Q BYUSER for example). CP was even fooled: on the
password prompt one'd enter
byuser/byuserpswd/byuserpswd
that is, for CP it looked like a
Rob van der Heij wrote:
Actually, the better solution is to have *no* password for TCPMAINT.
You can with z/VM 5.3. Without a password, the TCPMAINT user can not
be revoked by incorrect logon attempts. If it were revoked, the
authorized people could not even logon to it with logonby. Also, you
It was a user mod for a while (pre-XA). I think VM/XA or VM/ESA 1.x was
when it became official. That was a long time ago, though.
I know I had it on SP5 as a usermod and remember that I was really glad
to not have to maintain it any more.
Curious to know if anyone has experienced issues cloning sles10 SP2
using the clone.sh script as described in The Virtualization Cookbook
for SLES 10 SP2. The script works perfectly the first time I invoke
it. However, if I immediately invoke it again to clone another virtual
server, the script
Send the script
David Dean
Information Systems
*bcbstauthorized*
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Hilliard, Chris
Sent: Tuesday, September 23, 2008 3:10 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Cloning
David Boyes wrote:
It was a user mod for a while (pre-XA). I think VM/XA or VM/ESA 1.x was
when it became official. That was a long time ago, though.
I know I had it on SP5 as a usermod and remember that I was really glad
to not have to maintain it any more.
A very long time...
Hi
Here we go again:
I am receiving a WAIT STATE 9003 while trying to IPL my test LPAR
(VM5.3). I have no idea what/why he is trying to do at this point with
the PROCESSOR. Does anyone know a symptom that would cause this wait
state?
HCP9003W PROCESSOR QUIESCED -- VARY OFFLINE
On Tue, Sep 23, 2008 at 8:35 PM, O'Brien, Dennis L
Dennis.L.O'[EMAIL PROTECTED] wrote:
Be careful about what *no* password means. Rob is talking about RACF.
The directory allows a password of NOPASS, which might seem to be the
obvious thing if you don't read the manual. NOPASS actually
Hello Mike,
I was able to pull a few strings and have the z/VM V5.4 Guide for
Automated Installation and Service, as well as the two summaries, added
directly to the z/VM library page.
The reason why you cannot find them as part of the PDF library is because
that library contains the contents
On 9/23/2008 at 3:10 PM, in message
[EMAIL PROTECTED], Hilliard,
Chris [EMAIL PROTECTED] wrote:
Curious to know if anyone has experienced issues cloning sles10 SP2
using the clone.sh script as described in The Virtualization Cookbook
for SLES 10 SP2. The script works perfectly the first
This is a separate VM LPAR there is no second level. I am running a
2094-711 (z9) and it is an IFL.
Thank You,
Terry Martin
Lockheed Martin - Information Technology
z/OS z/VM Systems - Performance and Tuning
Cell - 443 632-4191
Work - 410 786-0386
[EMAIL PROTECTED]
Just logon to MAINT using LOGONBY with your personal userid/pw
Scott Rohling
On Tue, Sep 23, 2008 at 3:58 PM, Martin, Terry R. (CMS/CTR) (CTR)
[EMAIL PROTECTED] wrote:
Hi
One last thing on this. Am I logged on with my user id and password then
from there logonby to another machine such as
um how much memory is defined?
Is there a chance of IPLing in a 2nd level machine to see if instruction
simulation masks the problem?
David
From: The IBM z/VM Operating System on behalf of Martin, Terry R. (CMS/CTR)
(CTR)
Sent: Tue 9/23/2008 6:09 PM
To:
No, you cannot logon to one userid when logged onto another.
When already logged on, the process is CP LOGoff (or CP DISConnect).
Then you get a logo screen and can logon using LOGONBY. Personally, I'd
just clear the logon screen, and logon from a blank screen.
The command entry from a cleared
Just on the off chance...
are there any CPUs defined to that LPAR? Check the HMC.
Mike Walter
Hewitt Associates
Any opinions expressed herein are mine alone and do not necessarily
represent the opinions or policies of Hewitt Associates.
Martin, Terry R. (CMS/CTR) (CTR) [EMAIL PROTECTED]
Thanks Scott
Thank You,
Terry Martin
Lockheed Martin - Information Technology
z/OS z/VM Systems - Performance and Tuning
Cell - 443 632-4191
Work - 410 786-0386
[EMAIL PROTECTED]
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Have you altered your SYSTEM CONFIG and perhaps taken the processor offline
by mistake? If so - you can use SALIPL screen to point to a previous
version of the system config ...
Scott Rohling
On Tue, Sep 23, 2008 at 4:11 PM, David Kreuter [EMAIL PROTECTED]wrote:
um how much memory is
Your id need not be logged on. You can logon to more than one id using
logonby. When I am testing tools for our TPF testers, I frequently have
up to 6 concurrent ids that I have logged on via logonby.
Regards,
Richard Schuh
-Original Message-
From: The IBM z/VM Operating System
I am running with 25g. At this time an am not ready to IPL in 2nd level
mode. Why would it even be trying to OFFLINE a PROCSSOR at LOAD time? It
does not make a lot of sense. Could I have damaged up my CONFIG file or
DIRECTORY somehow while I was up?
Thank You,
Terry Martin
Lockheed
Just to clarify -- you can be logged on to your own userid if you like..
just bring up another session and logonby to maint with your userid/pw.
Just want to be sure you understand that being logged on to your own userid
has no bearing at all on being able to logonby to another userid...
Scott
I get it all the time when the system is already running somewhere else.
Have you already got it running elsewhere?
David Dean
Information Systems
*bcbstauthorized*
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Scott
I will check on this and let you know what I find!
Thank You,
Terry Martin
Lockheed Martin - Information Technology
z/OS z/VM Systems - Performance and Tuning
Cell - 443 632-4191
Work - 410 786-0386
[EMAIL PROTECTED]
From: The IBM z/VM Operating
I do not think so!
Thank You,
Terry Martin
Lockheed Martin - Information Technology
z/OS z/VM Systems - Performance and Tuning
Cell - 443 632-4191
Work - 410 786-0386
[EMAIL PROTECTED]
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
what model cpu is it?
Does the same CPLOAD MODULE IPL in a 2nd level system?
David
From: The IBM z/VM Operating System on behalf of Martin, Terry R. (CMS/CTR)
(CTR)
Sent: Tue 9/23/2008 5:45 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: [IBMVM] WAIT STATE 9003
Hi
Hi
One last thing on this. Am I logged on with my user id and password then
from there logonby to another machine such as MAINT? Or do I just logon
to MAINT using LOGONBY with my personal user id's password?
Thank You,
Terry Martin
Lockheed Martin - Information Technology
z/OS z/VM Systems -
Hello Mike,
I was able to pull a few strings and have the z/VM V5.4 Guide for
Automated Installation and Service, as well as the two summaries, added
directly to the z/VM library page.
The reason why you cannot find them as part of the PDF library is because
that library contains the contents
That was the problem. I found it logged on in a half way up state. I did
a SHUTDOWN REIPL and all is fine now.
Thanks for the help to ALL
Thank You,
Terry Martin
Lockheed Martin - Information Technology
z/OS z/VM Systems - Performance and Tuning
Cell - 443 632-4191
Work - 410
On 9/23/08 4:58 PM, Michael Forte [EMAIL PROTECTED] wrote:
I was able to pull a few strings and have the z/VM V5.4 Guide for Automated
Installation and Service, as well as the two summaries, added directly to the
z/VM library page.
The Force is strong in this one
Geez. 28 years. Now I really feel officially ancient. Thanks a lot, dude.
On 9/23/08 5:44 PM, Dave Wade [EMAIL PROTECTED] wrote:
David Boyes wrote:
A very long time...
http://vm.marist.edu/~vmshare/browse?fn=DMKLOGft=MEMO
http://vm.marist.edu/~vmshare/browse?fn=NOPSWDft=NOTE
On 9/23/08 5:58 PM, Martin, Terry R. (CMS/CTR) (CTR)
[EMAIL PROTECTED] wrote:
Hi
One last thing on this. Am I logged on with my user id and password then
from there logonby to another machine such as MAINT? Or do I just logon
to MAINT using LOGONBY with my personal user id's password?
The
On 9/23/08 6:14 PM, Mike Walter [EMAIL PROTECTED] wrote:
No, you cannot logon to one userid when logged onto another.
Mike! What happened to your copy of SESSION?
Native CP can't do it, but you certainly can use SESSION or YVETTE or NV/AS
or PVM to get multiple login sessions from a single
On 9/23/08 6:15 PM, Mike Walter [EMAIL PROTECTED] wrote:
Just on the off chance...
are there any CPUs defined to that LPAR? Check the HMC.
Also make sure they didn't accidentally give you a CF engine by mistake.
They used to look the same as an IFL on older HMCs, and some people haven't
Michael Forte wrote:
I was able to pull a few strings and have the z/VM V5.4 Guide for
Automated Installation and Service, as well as the two summaries,
added directly to the z/VM library page.
Pull a few more please! Get 'em to post the z/VM 5.4 SMAPI Error Codes
that are missing from the
Jack Woehr wrote:
Michael Forte wrote:
I was able to pull a few strings and have the z/VM V5.4 Guide for
Automated Installation and Service, as well as the two summaries,
added directly to the z/VM library page.
Pull a few more please! Get 'em to post the z/VM 5.4 SMAPI Error Codes
that are
46 matches
Mail list logo
