Using GETENTRY w/out VM:Secure as ESM; need GRANT NOPASS authorization

Products

• VM:Secure for z/VM

Issue/Introduction

We recently migrated from VMSECURE to RACF - we still use VMSECURE as the directory manager.

We have given groups of users GETENTRY authorization but they get prompted for passwords which we do not want.

How do I allow anyone that has EG GETENTRY authorization to execute it without having to provide a password?

 

Environment

Release : 3.2

Component : VM:Secure for z/VM

Resolution

You need to add GRANT NOPASS authorization for users you want to enter commands without entering a password. 

See the VM:Secure Without External Security Manager Administration guide under command authorizations;

https://techdocs.broadcom.com/us/en/ca-mainframe-software/traditional-management/ca-vm-secure-for-z-vm-without-security/3-2/administrators/administrating-authorizations/authorizations-for-command-processing.html

 

Make sure you use this documentation set now that you are running with the directory manager only part of VM:Secure.