|
View previous topic :: View next topic
|
| Author |
Message |
PrabakarV
New User
.jpg)
Joined: 21 Dec 2007
Posts: 88
Location: My Desk
|
|
|
|
Hi,
I would like to know the list of JCL utilities which uses username and password.
As per my understanding, FTP is one utility which uses username and password.
Can you anyone help me on this. Thanks. |
|
| Back to top |
|
 |
Escapa
Senior Member
Joined: 16 Feb 2007
Posts: 1399
Location: IL, USA
|
|
|
|
Is it a interview question?  |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6248
Location: Mumbai, India
|
|
|
|
| There are 20 of them, may be 22 - no, it's 30...i might be able to give an exact count only if I've worked on all the utilities...and, more importantly, count will depend on the definition of "utility" in the context of this question. |
|
| Back to top |
|
|
PrabakarV
New User
Joined: 21 Dec 2007
Posts: 88
Location: My Desk
|
|
|
|
no it is not a interview question  ... Anuj, where can i get those utility names and their functions? it would be helpful.... |
|
| Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006
Posts: 19243
Location: Inside the Matrix
|
|
|
|
Hello,
| Quote: |
| where can i get those utility names and their functions? it would be helpful.... |
If you explain how this might be helpful, there may be more useful replies. |
|
| Back to top |
|
|
MBabu
Active User
Joined: 03 Aug 2008
Posts: 400
Location: Mumbai
|
|
|
|
well any "utility" that authenticates on another server will need a userid and password (assuming other methods like certificates or passtickets or something is used). Also, any "utility" or command that manages user ids like ALTUSER might need a password if that is what you are changing.
As mentioned before, none of these are "utilities" in the mainframe sense. Utilities refers to a narrow range of data management programs generally starting with IEB, DFS, etc or targeted to a specific system (DB2 for example). FTP is not generally regarded as a utility. It's just another program. (FTP is defined by internet standards, RFC 959 if I recall). The reason utilities has a special meaning is mostly historical. |
|
| Back to top |
|
|
PrabakarV
New User
Joined: 21 Dec 2007
Posts: 88
Location: My Desk
|
|
|
|
Hi Dick
| Quote: |
| If you explain how this might be helpful, there may be more useful replies. |
i need to find the list of jobs which is using username and password in my system which is having job count around 60000... from that i need to find out the usernames and passwords... i hope this would help you understanding the actual need.... thanks |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6248
Location: Mumbai, India
|
|
|
|
| PrabakarV wrote: |
| i need to find the list of jobs which is using username and password in my system ... |
Then you should ask this to your site-support group. Even if we provide you some of the examples here they may/may not match to the utilities available at your shop, it might turn out to be a futile effort later... fwiw. |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8700
Location: Dubuque, Iowa, USA
|
|
|
|
| Quote: |
| i need to find the list of jobs which is using username and password in my system which is having job count around 60000... from that i need to find out the usernames and passwords... i hope this would help you understanding the actual need.... thanks |
Your request definitely needs some more thought -- as stated it is too vague to be practical.
First, do you include the jobs that are started tasks? They sometimes have user ids and passwords, but sometimes are handled via a table in RACF. They are definitely jobs executing in the system, though.
Second, unless you are doing this by explicit management request, this could be viewed as an attempt to hack your mainframe and may lead to seriously negative repercussions -- many sites will terminate people for taking such actions (user ids are not so much the issue as getting access to the passwords).
Third, this type of information is best acquired by contacting your site support group and having the security person (or team) work with you to clarify just what you are needing, and providing you the data in an approved fashion. Since jobs may enter the system by a variety of methods (system scheduler, TSO submit, batch copy to internal reader, FTP to JES, console command just to name a few), there is no one place from which to derive all user ids -- other than the security package.
Fourth, there is no source for passwords -- they are not stored as clear text anywhere; the security administrators can change them but not find out what they currently are. So the password piece of what you are wanting is impossible, anyway. Many sites have an exit in their scheduler to provide the password automatically so the jobs do not have to have the password in them. |
|
| Back to top |
|
|
PrabakarV
New User
Joined: 21 Dec 2007
Posts: 88
Location: My Desk
|
|
|
|
| Thanks Anuj |
|
| Back to top |
|
|
PrabakarV
New User
Joined: 21 Dec 2007
Posts: 88
Location: My Desk
|
|
|
|
| Thanks Rob... |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6248
Location: Mumbai, India
|
|
|
|
| You're welcome. Robert has given you a comprehensive list of points to keep in mind before you proceed, good luck... |
|
| Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006
Posts: 19243
Location: Inside the Matrix
|
|
|
|
Hello,
| Quote: |
| I need to find the list of jobs which is using username and password in my system which is having job count around 60000... |
Hopefully, the userid/password is NOT stored in the jobs. . .
This would cause the environment to fail even the slackest security audit. . . |
|
| Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007
Posts: 10888
Location: italy
|
|
|
|
confusion and diffusion are paradigms of cryptography
if You spread around the jcls in many many libraries ( diffusion )
in a random way without documenting where ( confusion)
then userids and passwords will be cryptographically secured  |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8700
Location: Dubuque, Iowa, USA
|
|
|
|
Sounds like a good place to be an auditor, enrico!
Maybe not so good a place to be a manager, though. |
|
| Back to top |
|
|
|
|
