RE: Audit Journal Entry

First,  see the correction that I just posted.  Second, no they don't/won't
migrate as far as I know...but then again, what do I know :-)

Also, for those folks that don't look at signature lines,  I am no longer
the i5/OS security architect. I want to make it clear that I am not acting
in that roll when I respond to questions in this list.

I now work in Server and Technology Group (STG) Lab Services (was Custom
Technology Center) where I do security related consulting, development,
implementation directly for customers.   We report up through the
development organization (rather than Global Services).  Most of our work
comes through Business Partners, ISVs, and Global Services, although some
customers who happen to know about us go directly through us.  We are a
cost recovery center.  Our mission is to not cost the development
organization any money, while helping customers most effectively and
efficiently exploit their IBM hardware platforms.  The idea being that by
doing so more customers will run more stuff on our systems and need to buy
more of the platforms we build.

Patrick Botz
Senior Technical Staff Member
IBM Lab Services, Rochester
Security Architecture & Consulting, i5/OS Security Architect
(507) 253-0917, T/L 553-0917
CTC Fax # 507-253-2070
email: botz@xxxxxxxxxx

For more information on CTC, visit our website at
http://www.ibm.com/eserver/services
http://www.ibm.com/servers/eserver/services


midrange-l-bounces@xxxxxxxxxxxx wrote on 09/27/2006 07:59:50 AM:

Thanks for the frank and open answer. One of our customers got a T in
the type on an AF record - with a 20 following - and this is for lack
of authority to a TCP/IP port. A couple questions - do the GR types
migrate to where they apply better in subsequent releases? And
second, how does one get not authorized to a port? I tried port
restrictions, I tried Application Administration.