Author Topic: server on z/OS but access through Linux jumphost how to do user administration  (Read 3182 times)

Helle V. Justesen

  • Jr. Member
  • **
  • Posts: 26
    • View Profile
Hi

we have the Ondemand server (v. 10.1) on z/OS v. 2.4 and the company doing our user administration has until now accessed Ondemand using the windows administrator from a windows jumphost - now they have changed to a Linux jumphost - but apparently there is no Linux administrator - so does any one know how to do user administation (create/delete users and give/remove accesses) when you have a Linux client and a z/OS server v. 10.1?
I have been told that in the Linux client version 10.5 there is a web access - but then we need to upgrade the server on z/OS and that is not something we can do just overnight  (we have applications using ODWEK that need to be upgraded first and so on ...)

br
Helle V. Justesen 

Ed_Arnold

  • Hero Member
  • *****
  • Posts: 1199
    • View Profile
The 10.5 Administrative Client is fully tested and supported when used against a 10.1 server.

https://www.ibm.com/support/pages/compatibility-matrix-content-manager-ondemand-clients-and-servers

I recommend when upgrading to upgrade the clients first, then separately upgrade the server. 

Ed Arnold
« Last Edit: December 03, 2020, 08:17:29 AM by Ed_Arnold »
#zOS #ODF

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2228
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
I order to avoid incriminating myself, I'll only say:  "SSH Tunnels".  :)

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

Helle V. Justesen

  • Jr. Member
  • **
  • Posts: 26
    • View Profile
hi
Thanks for the replies.

Maybe I'm mistaken - but I thought that the administrative client was only available for windows?

Br
Helle V. Justesen

Ed_Arnold

  • Hero Member
  • *****
  • Posts: 1199
    • View Profile
Oops, I may have misunderstood the original question.

The WINDOWS admin client will connect to any supported OnDemand server platform.

I take it you're asking about a LINUX admin client which does not exist.

Ed
#zOS #ODF

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2228
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
I'll risk incrimination here...  :)

You can use "SSH tunnels" to create a portal from the jumphost to the CMOD server.  Then you configure your windows client to connect to the jump host, and the jump host forwards the connection through the encrypted tunnel to the other side.

This may or may not violate your local security policy -- even though it obeys the spirit of the policy (all connections into production must go through the jump host), the people in charge of enforcing the policy may not see it that way.

The alternative that most organizations provide is a citrix server that has one foot inside the internal network, and the other foot inside the production network.

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

Helle V. Justesen

  • Jr. Member
  • **
  • Posts: 26
    • View Profile
okay - I'll forward Justin's preposal - and see what they say....

Just for my understanding - is the window administrator client the only way to do user administration?   so if you have a Linux installation you still need to have a windows admin ? 

Br
Helle

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2228
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
It's the only Windows graphical interface for administration.  There is the 'arsxml' utility, but that's more for batch administration, or moving configurations from system to system.

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR