Re: Oops and finding passwords on a system...

2009-05-14 Thread Alan Altmark
On Tuesday, 05/12/2009 at 04:34 EDT, Mark Wheeler mwheele...@hotmail.com wrote: These are the kind of questions I really hate to see, because many of us know the answer (or multiple answers) and want to help. Actually, it's those answers that I hate to see, because, to paraphrase, the

Re: Oops and finding passwords on a system...

2009-05-13 Thread Ray Waters
Sent: Tuesday, May 12, 2009 2:36 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Oops and finding passwords on a system... I didn't log in for awhile and, due to advancing age (actually a year older tomorrow too), I've forgotten what I made the MAINT password. And, since this was also the main password

Re: Oops and finding passwords on a system...

2009-05-13 Thread Scott Rohling
*Subject:* Oops and finding passwords on a system... I didn’t log in for awhile and, due to advancing age (actually a year older tomorrow too), I’ve forgotten what I made the MAINT password. And, since this was also the main password used for almost all the service machines, I don’t have

Re: Oops and finding passwords on a system...

2009-05-13 Thread David Kreuter
: [IBMVM] Oops and finding passwords on a system...From: Scott Rohling scott.rohl...@gmail.comDate: Wed, May 13, 2009 8:48 amTo: IBMVM@LISTSERV.UARK.EDU1DB contains the 'monolithic' USER BACKUP which is easier to read/traverse then the clustered source directory on 1DF..Scott On Wed, May 13, 2009

Oops and finding passwords on a system...

2009-05-12 Thread RPN01
I didn¹t log in for awhile and, due to advancing age (actually a year older tomorrow too), I¹ve forgotten what I made the MAINT password. And, since this was also the main password used for almost all the service machines, I don¹t have any other locations to log into that would help me. I know;

Re: Oops and finding passwords on a system...

2009-05-12 Thread Mark Pace
MDISK 01DB 3390 1421 009 540W02 MR On Tue, May 12, 2009 at 3:36 PM, RPN01 nix.rob...@mayo.edu wrote: I didn’t log in for awhile and, due to advancing age (actually a year older tomorrow too), I’ve forgotten what I made the MAINT password. And, since this was also the main password used for

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
Happy Birthday! While I don't have access at the moment to a 5.4 system -- the type of DASD you used (3390-3 , 3390-9 ?) will be important for others to help... (I'll be trying to get to my 5.4 on 3390-9 with everything on 540RES in the meantime to help) Scott On Tue, May 12, 2009 at 1:36

Re: Oops and finding passwords on a system...

2009-05-12 Thread Mark Pace
It would appear that the 1DB disk could be just about anywhere. On Tue, May 12, 2009 at 3:44 PM, Mark Pace mpac...@gmail.com wrote: MDISK 01DB 3390 1421 009 540W02 MR On Tue, May 12, 2009 at 3:36 PM, RPN01 nix.rob...@mayo.edu wrote: I didn’t log in for awhile and, due to advancing age

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
Might be time to get the DIRENT package from the IBM VM downloads page: http://www.vm.ibm.com/download/packages/descript.cgi?DIRENT This reads the object directory so you don't need access to the source directory.. Not sure if this helps - but maybe..? Scott On Tue, May 12, 2009 at 1:46 PM,

Re: Oops and finding passwords on a system...

2009-05-12 Thread Marcy Cortes
: Tuesday, May 12, 2009 12:36 PM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] Oops and finding passwords on a system... I didn't log in for awhile and, due to advancing age (actually a year older tomorrow too), I've forgotten what I made the MAINT password. And, since this was also the main

Re: Oops and finding passwords on a system...

2009-05-12 Thread Marcy Cortes
: Tuesday, May 12, 2009 12:54 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Oops and finding passwords on a system... If he is logged on, Q MDISK USER DIRMAINT LOC Marcy

Re: Oops and finding passwords on a system...

2009-05-12 Thread Steve Mitchell
Subject:Re: Oops and finding passwords on a system

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
Sweet! Thanks for that, Marcy .. that's a new one for me, we've apparently improved Q MDISK! (or I was just unblissfully ignorant) Scott On Tue, May 12, 2009 at 1:55 PM, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Oops. Make that Q MDISK USER DIRMAINT 1DB LOC Marcy

Re: Oops and finding passwords on a system...

2009-05-12 Thread Mark Wheeler
http://www.linkedin.com/in/marklwheeler Date: Tue, 12 May 2009 14:36:19 -0500 From: nix.rob...@mayo.edu Subject: Oops and finding passwords on a system... To: IBMVM@LISTSERV.UARK.EDU I didn’t log in for awhile and, due to advancing age (actually a year older tomorrow too), I’ve forgotten

Re: Oops and finding passwords on a system...

2009-05-12 Thread Ward, Mike S
A little bit of social engeneering? From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mark Wheeler Sent: Tuesday, May 12, 2009 3:30 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Oops and finding passwords on a system... Greetings all, These are the kind

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
of everyone else's systems. Respectfully, Mark Wheeler http://www.linkedin.com/in/marklwheeler -- Date: Tue, 12 May 2009 14:36:19 -0500 From: nix.rob...@mayo.edu Subject: Oops and finding passwords on a system... To: IBMVM@LISTSERV.UARK.EDU I didn’t log

Re: Oops and finding passwords on a system...

2009-05-12 Thread RPN01
, May 12, 2009 12:54 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Oops and finding passwords on a system... If he is logged on, Q MDISK USER DIRMAINT LOC Marcy

Re: Oops and finding passwords on a system...

2009-05-12 Thread Marcy Cortes
- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of RPN01 Sent: Tuesday, May 12, 2009 1:53 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Oops and finding passwords on a system... Yes, I discovered this shortly after asking. I was able to do this from

Re: Oops and finding passwords on a system...

2009-05-12 Thread RPN01
Actually, OPERATOR has it by default, though I¹m not sure why it needs it other than problems like this one. -- Robert Nix -- Mayo Clinic On 5/12/09 3:51 PM, Scott Rohling scott.rohl...@gmail.com wrote: -  Don't hand out OPTION DEVMAINT indiscriminately (as in this case -- does OPERATOR

Re: Oops and finding passwords on a system...

2009-05-12 Thread Schuh, Richard
Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Tuesday, May 12, 2009 1:52 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Oops and finding passwords on a system... I understand your premise, but respectfully disagree. We're not going to increase the security of z/VM

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
Absolutely this is a security risk! I would never give OPERATOR DEVMAINT ability - OPERATOR should have the ability to do particular things and query particular things -- but not things like see passwords or the get ability to get to anything they want (e.g. DEF MDISK). If I was an auditor -

Re: Oops and finding passwords on a system...

2009-05-12 Thread Huegel, Thomas
and finding passwords on a system... Absolutely this is a security risk! I would never give OPERATOR DEVMAINT ability - OPERATOR should have the ability to do particular things and query particular things -- but not things like see passwords or the get ability to get to anything they want (e.g. DEF

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
@LISTSERV.UARK.EDU *Subject:* Re: Oops and finding passwords on a system... I understand your premise, but respectfully disagree. We're not going to increase the security of z/VM by not discussing ways to do things when necessary. The mirror question to yours is: 'How do I prevent a z/VM system

Re: Oops and finding passwords on a system...

2009-05-12 Thread Mike Walter
to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Oops and finding passwords on a system... Wow .. open mouth, insert foot ... it does imply OPERATOR has it by default - and here I am saying it's a security violation. This is just

Re: Oops and finding passwords on a system...

2009-05-12 Thread Rich Greenberg
On: Tue, May 12, 2009 at 01:59:40PM -0700,Schuh, Richard Wrote: } According to the help file, The user must be the primary system operator or the user's OPTION directory statement must include the DEVMAINT option. Does this not indicate that OPERATOR does not need DEVMAINT? There are many

Re: Oops and finding passwords on a system...

2009-05-12 Thread Bob Bates
From the HELP file for DEFINE MDISK says the PRIMARY OPERATOR has it. Doesn't matter what's in the directory or what the userid is. If you are the primary operator, you've got the ability. Besides, AUTOLOG, SET SECUSER, and SEND can also be used to look at files on other users if you have

Re: Oops and finding passwords on a system...

2009-05-12 Thread Mike Walter
, and security admin issues. Mike Walter Hewitt Associates (Sent from the wee keyboard on a Blackberry.) - Original Message - From: Bob Bates [robert.ba...@wellsfargo.com] Sent: 05/12/2009 04:48 PM EST To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Oops and finding passwords on a system... From

Re: Oops and finding passwords on a system...

2009-05-12 Thread Scott Rohling
Hewitt Associates (Sent from the wee keyboard on a Blackberry.) - Original Message - From: Bob Bates [robert.ba...@wellsfargo.com] Sent: 05/12/2009 04:48 PM EST To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Oops and finding passwords on a system... From the HELP file for DEFINE MDISK

Re: Oops and finding passwords on a system...

2009-05-12 Thread David Kreuter
... Original Message Subject: Re: [IBMVM] Oops and finding passwords on a system... From: Scott Rohling scott.rohl...@gmail.com Date: Tue, May 12, 2009 9:31 pm To: IBMVM@LISTSERV.UARK.EDU Good question -- I know that RACF can be used to control command access -- but I'm not sure