[Info-vax] Installing and using GNV - some feedback and questions

[John Reagan]

On Sunday, October 30, 2016 at 2:23:57 PM UTC-4, Craig A. Berry wrote:
> On 10/30/16 5:58 AM, IanD wrote:
> > We might even get to a model where VMS can be totally group
> > administered for each representative group / application (I don't
> > think it's entirely possible now is it?, for example, how do you
> > allow say a group manager to run jobs under a username of someone in
> > their group only? You have to give them CMKRNL which allows them
> > access to run under any username on the system. We need a GRPKNL
> > privilege to limit the scope to be group bound)
> 
> You need CMKRNL to do SUBMIT/USER, but Jonathan Ridler's JUMP utility
> allows fine-grained control over who can impersonate whom, optionally
> logging any and all activity done under another username:
> 
> <http://vms.process.com/scripts/fileserv/fileserv.com?JUMP>

There used to be a SUBMIT/USER in the GEM nightly test suite to start up some Fortran tests (it runs under a Fortran account).  I swapped it out with a private/public key so the GEM account can 'rsh' to the F90 account without a password.  It now rsh's a SUBMIT command that does the SUBMIT in the F90 account.