Resources › VMDIAL Resource Class—Secure Dial Access Virtual Machines

VMDIAL Resource Class—Secure Dial Access Virtual Machines

Valid on z/VM.

Use VMDIAL to secure virtual machines with DIAL access security.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) VMDIAL(userid,userid,userid,...)

Prefix length

One to eight characters

Full name

One to 13 characters

Generic prefixing allows the administrator to group a set of similar resource names together, and define them by generic prefix.

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) VMDIAL(oper,oper,...)

Prefix length

One to 13 characters

Full name

One to 13 characters

Capacity of list

One to five userids per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOHAS, and WHOOWNS
• The VMDIAL ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The VMDIAL ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• VMDIAL(OWN) authority to ADD or REMOVE ownership from ACIDs

The administrator can:

• Use any of the following methods for restricting dial access to virtual machines: Expiration, Time/Day, and Actions.
• VMDIAL(XAUTH) authority to permit or revoke access to virtual machines

Examples: VMDIAL Resource Class—Secure

This example protects DIAL access to the virtual machine OPER17, by assigning ownership to the Operations Department:

TSS ADDTO(OPERDEPT) VMDIAL(OPER17)

This example removes ownership:

TSS REMOVE(OPERDEPT) VMDIAL(OPER17)

This example permits a group in the Payroll Department to dial the virtual machine PAY17:

TSS PERMIT(PAYUSER) VMDIAL(PAY17)

When PAYUSER dials the virtual machine PAY17, he is prompted for his password. VMDIAL can also restrict which lines an ACID may use when dialing into a virtual machine.

TSS PERMIT(PAYUSR2) VMDIAL(PAY17.0041)

This example allows PAYUSR2 to dial the PAY17 machine at virtual line 0041 only. This example revokes PAYUSER's dial access permission:

TSS REVOKE(PAYUSER) VMDIAL(PAY17.0041)