Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread David Boyes
It is a hard sell to management to buy an ESM if there is no audit requirement. Thus my point about IBM quitting whining to us about buying one and start supplying one by default as the Right and Proper Way.

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread David Boyes
On 12/9/10 3:27 AM, Alan Altmark alan_altm...@us.ibm.com wrote: In order to achieve the savings you imply, then z/VM must move to the z/OS model in which, except for a few specific functions, an ESM is required for proper operation. NO native CP security controls beyone those required to

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Rob van der Heij
On Wed, Dec 8, 2010 at 7:38 PM, Alan Altmark alan_altm...@us.ibm.com wrote: I've been saying for several years, You need an ESM.   More and more z/VM security management will be focused on ESMs, not native CP.  If your fave ESM doesn't simplify things for you, gripe to the vendor. That's

MAILIT

2010-12-09 Thread Willimann, Alan (NIH/CIT) [C]
I have down loaded MAILIT from the IBM VM Download page. I can send a message to another VM user, it can be found in the users pun queue. I can not figure out how to get an email to go out across the network. Do I have to define something in TCPIP? The operating system is z/VM 5.4 running on an

Re: MAILIT

2010-12-09 Thread Bill Munson
Alan, The tcpip part is SMTP up and running. also the VM user sending the MAIL needs to have a names file. if your userid sending mail is NJ2W002 it is called NJ2W002 NAMESA and it would look like this :nick.Mike :list. mike.wal...@hewitt.com :nick.ROB :list.

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Schuh, Richard
Not necessarily, there is LOGONBY. They need only know their own passwords. Should anyone have full authority including all the passwords? If so, who? Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Tom Huegel
Does it really matter? SOX is just another way congress has come up with to destroy the American economy, and in fact the American way of life. Besides all of our passwords are probably available on Wikileaks anyway. Don't you just love the airport scanners and patdowns? On Thu, Dec 9, 2010 at

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread McKown, John
-Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Huegel Sent: Thursday, December 09, 2010 11:01 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Vswitch Grant as a CMD in User's Directory? snip Don't you just love the airport

Re: FTP within REXX EXEC

2010-12-09 Thread gclovis
Hi, Steve. My question is. What can I do to retrieve the return code if this fails or is successful? The answer is: append (exit to FTP command. See this sample (that sends PERFSVM summary files to GDG file at zOS). In this case: binary, EBCDIC, variable records...

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Schuh, Richard
They spoil the patdowns by requiring that the genders of the patter and pattee be the same :-) Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Huegel Sent: Thursday, December 09, 2010 9:01 AM To:

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread George Henke/NYLIC
Does it really matter? SOX is just another way congress has come up with to destroy the American economy, and in fact the American way of life. That is not true. SOX was a much needed and overdue reform and perhaps one of the best things both Bush and Congress did for the American economy,

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread George Henke/NYLIC
Does it really matter? SOX is just another way congress has come up with to destroy the American economy, and in fact the American way of life. That is not true. SOX was a much needed and overdue reform and perhaps one of the best things both Bush and Congress did for the American economy,

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Alan Altmark
On Thursday, 12/09/2010 at 12:01 EST, Tom Huegel tehue...@gmail.com wrote: Does it really matter? SOX is just another way congress has come up with to destroy the American economy, and in fact the American way of life. When you read the law, you find that SOX is simply a way to hold

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Mark Post
On 12/9/2010 at 01:36 PM, George Henke/NYLIC george_he...@newyorklife.com wrote: Does it really matter? SOX is just another way congress has come up with to destroy the American economy, and in fact the American way of life. Given the current real life demands on our moderator, could we kill

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Bill Munson
good point Mark Bill Munson From: Mark Post mp...@novell.com To: IBMVM@LISTSERV.UARK.EDU Date: 12/09/2010 01:46 PM Subject:Re: Vswitch Grant as a CMD in User's Directory? Sent by:The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU On 12/9/2010 at 01:36 PM,

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread George Henke/NYLIC
Very true, Alan. But a good auditor always asks the question, Where is the risk? It is pointless to look for controls, test controls, or require controls, where there is no risk which a testing everything approach would try to do. It is the 20:80 rule. 80% of the risk can usually be covered

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread Alan Altmark
On Thursday, 12/09/2010 at 11:41 EST, Schuh, Richard rsc...@visa.com wrote: Not necessarily, there is LOGONBY. They need only know their own passwords. They logon and access USER DIRECT. Now they know ALL the passwords. Of course, you can have LBYONLY for everyone. But that misses the

Re: Vswitch Grant as a CMD in User's Directory?

2010-12-09 Thread O'Brien, Dennis L
You would HAVE to buy an ESM, whether from IBM or CA. Or have IBM include a basic awful one (eg, RACF) in the price of VM and be done with it. Including a basic one that can be replaced with Something Else would make everybody (IMHO) happy. The internal cost of including RACF can't be that large.