Skip to Main Content
IBM Z Software


This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Categories Runtime
Created by Guest
Created on Jan 24, 2019

TXSeries use of PAM module needs rveiew

So the issue is that basically WebSphere Liberty is running as user cics AND thru the Web interface, in the back-end, the TXServies Web still tries to execute

su - cics

as demonstrated below in the screenshot, IT is NOT necessary to su to 'cics' as the user is already 'cics' (TXseries Web processes), so executing the command

cicsupdate .... etc

should be sufficient.

Hi Carlos,
Just little bit background on this. Earlier version of TXSeries (before v8.1), administration is only possible using "root" use and you need to use "root" user credential for web admin GUI. On version 8.1 onwards we started supporting non-root user administration. So any user part of "cics" group can do administration. From Liberty, we are doing su - "user" to run cics command. If allow any user without doing su - "user", the user would able to stop and start or destroy regions created by a different user and that should NOT be allowed. To avoid the use PAM module, it requires a design changes from TXSeries side and if you open a RFE, we would validate that. If it's something, we can do quickly, we will be planning the same in next fix pack.

Regards,
Sreejith N
TXSeries L3 Support, IBM Systems Group

Idea priority High
  • Guest
    Reply
    |
    Apr 15, 2020

    TXSeries team does not have plans to implement this RFE in near future and so this requirement is being declined at this point. The requirement will be kept in the RFE system and might be reassessed in the future. You also have an opportunity to resubmit in twelve months time if you wish it to be reconsidered then.