You summed it up well. Let us know if you have security and work management
questions.
One thing I can suggest. In addition to the iASP, consider using an
interactive subsystem by customer. That subsystem would have a custom
routing program that would do things like check to be sure this user should
be in this subsystem, set security up as needed, assign proper printer and
other devices, etc. You will also have the ability to get to a specific
users job much more quickly than searching a large interactive subsystem. I
would extend this to batch as well. If you need some examples I can post
them. Additionally check out the session Larry Bolhuis and I do at COMMON
on this very topic. (Advanced Interactive Work Management)
In order to get past the requirement for an iASP to have dedicated disk
drives (if that's needed) you might consider making the entire partition
that hosts the customers a virtual partition. That way you'll be able to
set up the iASPs at whatever size you need them to be, as opposed to a
single drive ( = very bad performance ) iASP if your customer set does not
need at least 6 physical drives in the iASP.
--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
e-mail s44b1443
Sent: Monday, December 08, 2014 4:16 AM
To: Midrange Systems Technical Discussion
Subject: Running two separate customers in a single partition with complete
isolation
Many thanks to everyone who has take time to reply to this....please let me
re-iterate one or two things...
The 'saving' to be made is the management charge from the 3rd party hosting
company....the hosting companies charge a management fee on every partition
so fewer partitions mean fewer overheads which mean the offering will be
more attractive to smaller shops.
This offering would be aimed at any new, small, customer who has either no
IT staff or no desire to manage IBM i.
I appreciate with certain restrictions put in place a solution is possible
using standard IBM i a security.
I am against this approach and have recommended that my company adopt a
dedicated partition per customer approach until such time in the future that
we can add the necessary restricted admin functions to our software product
to make it a true 'SaaS' product. In the meantime though I have been asked
to see whether a tool such as I described exists as our sales dept. believe
the cost of a dedicated partition would be prohibitive for smaller
prospects.
In summary it's sounding like no tool is available and the only solution is
to tightly configure and manage in built IBM i securities....iASP's will
offer segregation library wise.
Thanks again.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at
http://archive.midrange.com/midrange-l.
midrange.com
