[Info-vax] OpenVMS issue for person's STATUS

[Jan-Erik Soderholm]

abrsvc wrote 2013-02-19 15:02:
> From a littel aditional research, here is what I think is happening:
>
> The IBM stuff resides on the OpenVMS sysetm and is "managed" by network
> packets received from a "manager" system.  The VMS portion runs as a
> detached process and provides the account management on the VMS side.

That is then what is called an "adapter" in IBM-speek. Here is
a list of available adapters for IBM Tivoli Identity Manager:
http://www-01.ibm.com/support/docview.wss?uid=swg21396546

No OpenVMS mentioned there.

There is something called a "Manual Service" that might apply.

There also seems to be a service type where the messages are
sent as emails. That might be used to build an automated
service on the OpenVMS box that acts on the emails received.

http://publib.boulder.ibm.com/infocenter/tivihelp/v5r1/index.jsp?topic=%2Fcom.ibm.itim.infocenter.doc%2Fref%2Fref_ic_cfgsys_mailtemplate.html

Note sure that us the correct or current version, but
you'll get the idea.

This is examples of steps that you (that is "kevinparker124")
have to take.

Note that I have never before even heard about this
IBM product, I just took 10 minutes using tools available to
me such as Google and the IBM public documentation.


Jan-Erik.



> As far as I can tell, there is no specific way to "revoke" identifiers
> directly in this manner. There are, however, ways to disuser accounts as
> well as completely remove them.
>
> The bottom line here is that this issue is beyond the scope of any
> particular help here.  There is too much context required as well as a
> specific understnading of the setup on both the manager system and
> target OpenVMS system.  Since this is a security issue, its function and
> control should not be discussed in a public forum.  I would suggest that
> a consultant be hired (either from some of us here in this forum or
> elsewhere) that is familiar with the particulars of both OpenVMS and
> ISIM/ITIM.
>
> Dan
>