Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread David Boyes
I have most of the piece parts done (IUCV driver, PAM driver, Kerberos and LDAP interfaces, Linux guest to do the heavy lifting) to enable VM to use any authentication sources supported by PAM, including AD. The remaining part is the necessary CP modules to normalize all the entry points to CP

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread Schuh, Richard
To: IBMVM@LISTSERV.UARK.EDU Subject: Re: I hate to ask -- VM passwords authenticated against AD? I have most of the piece parts done (IUCV driver, PAM driver, Kerberos and LDAP interfaces, Linux guest to do the heavy lifting) to enable VM to use any authentication sources supported by PAM

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread Alan Altmark
On Wednesday, 06/16/2010 at 01:05 EDT, Schuh, Richard rsc...@visa.com wrote: Amen, brother. In the late '90s, we (USAir before it became USAirways) decided to donate the device throttling code I had written. Donating it took longer than writing and testing it. However, they do have a

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread David Boyes
In this case, however, both IBM and CA offer products for sale in this space. I would rather see the requirement levied against the various ESMs to provide this function since that's where it logically belongs. Alan Altmark z/VM Development IBM Endicott I'd make a counterargument that if

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread Alan Altmark
On Wednesday, 06/16/2010 at 02:02 EDT, David Boyes dbo...@sinenomine.net wrote: I'd make a counterargument that if IBM intends to position z/VM only as a Linux hosting environment, then the current setup that requires the user to have the skills to rebuild CP to enable an ESM (which

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread David Boyes
When building an ESM, you have some fairly complex challenges. At the top of the list, the ESM 1. Cannot be simply or easily circumvented (even by a sysadmin [as opposed to sysprog] ), 2. Must enforce a limited set of operations when the ESM server is down sufficient only to get the ESM

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread Ward, Mike S
To: IBMVM@LISTSERV.UARK.EDU Subject: Re: I hate to ask -- VM passwords authenticated against AD? I have most of the piece parts done (IUCV driver, PAM driver, Kerberos and LDAP interfaces, Linux guest to do the heavy lifting) to enable VM to use any authentication sources supported by PAM

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-16 Thread Schuh, Richard
-- VM passwords authenticated against AD? Hopefully they won't take it and shelf it.

I hate to ask -- VM passwords authenticated against AD?

2010-06-15 Thread Lee Stewart
I'm no fan of AD, but I have to ask... Has anyone heard of a way to authenticate VM logon passwords against Active Directory? No RACF.. Thanks, Lee -- Lee Stewart, Senior SE Sirius Computer Solutions Phone: (303) 996-7122 Email: lee.stew...@siriuscom.com Web: www.siriuscom.com

Re: I hate to ask -- VM passwords authenticated against AD?

2010-06-15 Thread Alan Altmark
On Tuesday, 06/15/2010 at 04:55 EDT, Lee Stewart lstewart.dsgr...@attglobal.net wrote: Has anyone heard of a way to authenticate VM logon passwords against Active Directory? No RACF.. I think we've talked about this before. None of commercially available ESMs do that, and the only way to