Jeff,
We used to do this until recently, it worked well and we would be still if
someone had not done a silly that would have caused too much effort to
resolve.
When you are running stable versions of RACF on both Z/OS and Z/VM then
there is no issue. The thing that you have to be aware of is
Jeff,
The last time I read about, all RACF documents says that it is possible.
But, only when the zOS doesn't work in Sysplex. This restriction killed my
chances to do tests...
__
Clovis
From:
Jeff Gribbin jeff.grib...@gmail.com
To:
gclo...@br.ibm.com wrote :-
Jeff,
The last time I read about, all RACF documents says that it is possible.
But, only when the zOS doesn't work in Sysplex. This restriction killed
my chances to do tests...
Clovis
We were successfully sharing with a Z/OS sysplex so this is not an
On Wednesday, 01/05/2011 at 07:12 EST, Jeff Gribbin
jeff.grib...@gmail.com wrote:
I've not used RACF on VM for a few decades and I believed that, as z/OS
advanced, there came a time when it was no longer possible to share a
RACF
database between a z/VM system and a z/OS system. I'm sure that
We do not share a RACF database, but use a copy of the zOS RACF database for
our z/VM system. We make all changes thru the zOS system, and copy/replace the
z/VM RACF database quarterly or as needed. VM security does not change
significantly and the Auditors are happy with this.
Alan Altmark alan_altm...@us.ibm.com wrote:-
I am the one who has suggested publicly that just because you *can*
share,
it does not follow that you *should* share.
I fully understand and respect Alan's views on the Con's of sharing RACF
databases - but there are some Pro's as well. One of
Thankyou Alan - that succinctly lifts my understanding to the level
of, It's physically possible but really, really inadvisable because
... followed by exactly the concerns that I would have felt compelled
to raise here had the consensus been that it really was as easy as the
manual appears to
