Re: Running two separate customers in a single partition with complete isolation

What you are somewhat describing is known as "Multitenancy"
https://en.wikipedia.org/wiki/Multitenancy

It's a valid architecture, usually used in a SaaS model; but I don't
believe it's all that common in the IBM i world.

You can find some posts in the archives from Nathan Andelin whose company
offers a SaaS solution on IBM i.

Additionally, at least some of the "free online IBM i development hosts"
would be considered multitenant SaaS.

The key point in multitenancy is isolating the functions available. Your
customers can't have a *SECADM or *SECOFR class user. Those are reserved
for the hosting company.

Charles


On Fri, Dec 5, 2014 at 12:39 PM, e-mail s44b1443 <s44b1443@xxxxxxxxxxxx>
wrote:

Hi,

The obvious answer to this would be to use Logical Partitioning and two
partitions but does anyone know of a tool that can effectively secure a
single partition so that two customers could operate on the same partition
completely independently?

I know that I can use in built security to secure libraries, IFS, output
queues etc...but this will require manual setup and maintenance.

Why would I want to do this? my company is looking to provide a hosted
solution and since most of the cost with a hosting provider is the charge
for managing an IBM i partition then to make it more attractive to our
customers I've been asked whether a tool is available to easily allow us to
securely run multiple customers on a single partition.

The software product uses a combination of web (via in built HTTP server)
and traditional 5250 emulation. All of the admin work a customer would
undertake, e.g. creating users, would be via 5250 emulation. We believe we
can modify our software to cater for this scenario but it will be a lengthy
exercise and couldn't be resourced until way in the future.

I have already stated that I believe such a tool will not exist but I'm
having to investigate to make sure.

Anyone know of such a tool?

Thanks
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.