OnDemand User Group

Support Forums => Other => Topic started by: Helle V. Justesen on December 03, 2020, 06:50:33 AM

Title: server on z/OS but access through Linux jumphost how to do user administration
Post by: Helle V. Justesen on December 03, 2020, 06:50:33 AM

Hi

we have the Ondemand server (v. 10.1) on z/OS v. 2.4 and the company doing our user administration has until now accessed Ondemand using the windows administrator from a windows jumphost - now they have changed to a Linux jumphost - but apparently there is no Linux administrator - so does any one know how to do user administation (create/delete users and give/remove accesses) when you have a Linux client and a z/OS server v. 10.1?
I have been told that in the Linux client version 10.5 there is a web access - but then we need to upgrade the server on z/OS and that is not something we can do just overnight  (we have applications using ODWEK that need to be upgraded first and so on ...)

br
Helle V. Justesen 

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Ed_Arnold on December 03, 2020, 08:08:39 AM

The 10.5 Administrative Client is fully tested and supported when used against a 10.1 server.

https://www.ibm.com/support/pages/compatibility-matrix-content-manager-ondemand-clients-and-servers (https://www.ibm.com/support/pages/compatibility-matrix-content-manager-ondemand-clients-and-servers)

I recommend when upgrading to upgrade the clients first, then separately upgrade the server. 

Ed Arnold

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Justin Derrick on December 03, 2020, 11:22:02 AM

I order to avoid incriminating myself, I'll only say:  "SSH Tunnels".  :)

-JD.

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Helle V. Justesen on December 04, 2020, 02:43:33 AM

hi
Thanks for the replies.

Maybe I'm mistaken - but I thought that the administrative client was only available for windows?

Br
Helle V. Justesen

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Ed_Arnold on December 04, 2020, 12:10:52 PM

Oops, I may have misunderstood the original question.

The WINDOWS admin client will connect to any supported OnDemand server platform.

I take it you're asking about a LINUX admin client which does not exist.

Ed

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Justin Derrick on December 06, 2020, 02:20:18 PM

I'll risk incrimination here...  :)

You can use "SSH tunnels" to create a portal from the jumphost to the CMOD server.  Then you configure your windows client to connect to the jump host, and the jump host forwards the connection through the encrypted tunnel to the other side.

This may or may not violate your local security policy -- even though it obeys the spirit of the policy (all connections into production must go through the jump host), the people in charge of enforcing the policy may not see it that way.

The alternative that most organizations provide is a citrix server that has one foot inside the internal network, and the other foot inside the production network.

-JD.

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Helle V. Justesen on December 07, 2020, 03:41:35 AM

okay - I'll forward Justin's preposal - and see what they say....

Just for my understanding - is the window administrator client the only way to do user administration?   so if you have a Linux installation you still need to have a windows admin ? 

Br
Helle

Title: Re: server on z/OS but access through Linux jumphost how to do user administration
Post by: Justin Derrick on December 07, 2020, 09:25:46 AM

It's the only Windows graphical interface for administration.  There is the 'arsxml' utility, but that's more for batch administration, or moving configurations from system to system.

-JD.