8000 Giving a started task userid a password is a no-no. · Issue #4158 · zowe/api-layer · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Giving a started task userid a password is a no-no. #4158
Closed
@colinpaicemq

Description

@colinpaicemq

Describe the bug
A clear and concise description of what the bug is.
Started task userids should have NOPASSWORD, to prevent someone from trying to guess the password and revoking the userid. The is called a protected userid.
(There has been some discussion on one of the z/OS sysprogs forum, and every one said passwords are a no-no.

On page https://docs.zowe.org/stable/user-guide/api-mediation/configuration-client-certificates/ it says

_Prerequisites for ZSS

When using ZSS for authentication, ensure that you satisfy the following prerequisites before you set up client certificate authentication:

**Set the password for the Zowe runtime user. The user is created with the NOPASSWORD parameter by the Zowe installer. It is necessary to change this password.**

For RACF, issue the following TSO command:

ALTUSER <ZOWE_RUNTIME_USER (ZWESVUSR by default)> PASSWORD()_

We need a solution where a password is not needed. (It may be just that the docs are wrong).

Can anyone tell me why it says a password is needed?

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0