IBM Data and AI

Welcome to the IBM Data and AI Ideas Portal for Clients!

We welcome and appreciate your feedback on IBM Data and AI Products to help make them even better than they are today!
Before you submit an idea, please perform a search first as a similar idea may have already been reported in the portal. If a related idea is not yet listed, please create a new idea and include with it a description which includes expected behavior as well as why having this feature would improve the service and how it would address your use case.
IBM Employees:
Clients:
  • Our team welcomes any feedback and suggestions you have for improving our offerings / products! This forum allows us to connect your offering / product improvement ideas with IBM product and engineering teams.

  • If you have not registered on this portal please click on the following link and register. To complete registration you will need to open the email you will receive from Aha to confirm your identity. http://ibm.biz/IBM-Data-and-AI-Portal-Register

Additional Information:
  • The shorter URL for this site is: https://ibm.biz/IBM-Data-and-AI-Ideas

  • To view our roadmaps: http://ibm.biz/Data-and-AI-Roadmaps

  • Reminder: This is not the place to submit defects or support needs, please use normal support channel for these cases

  • Please do not use the Ideas Portal for reporting bugs - we ask that you report bugs or issues with the product by contacting IBM support.

Removing the dependency on OS local user credentials for installing the IBM Datastage product

Hi Team

Problem Statement:

We are not able to install “IBM InfoSphere Datastage v11.5” on new VSI

Issue Description:

We are trying to install “IBM InfoSphere Datastage v11.5” product on new Linux host & as pre-requisite we are supposed to have product related ID’s created on OS before install which should have “static” password & may require “no-expiry”( fixed password) for future use (this is post installation part).

Detailed Description:

We are working on Data center migration project and on new Linux host due to new security policy we are not allowed to create any local users on Linux machine. So we will not be having any local OS user id/static password.

We are trying to install the IBM Datastage on new linux machines and we are not able to install due to Security issues related to local id/password as we are not allowed to have them.

So to install IBM datastage product we would need few of product related id's created locally prior to the installation , so this case is not possible for us.

IBM Pre-requisite requirement for OS id/password;

https://www.ibm.com/support/knowledgecenter/SSZJPZ_11.5.0/com.ibm.swg.im.iis.productization.iisinfsv.install.doc/topics/wsisinst_pln_user_reg.html

Thanks

  • Avatar32.5fb70cce7410889e661286fd7f1897de Guest
  • May 13 2020
  • Already exists
Who would benefit from this IDEA? JP Morgan Chase as Customer
How should it work?

So thing is "are we going to release new datastage version in nearest future which which will remove/bypass this dependency on having local accounts & static password" which requires during installation & post installation? as i see latest version like 11.5 & 11.7 does not support.

any thought on this?

Idea Priority Urgent
Priority Justification This new policy is going to be applicable across firm which we need to follow, & to adopt new hardware we would need to follow this new security policy set at Linux OS for Identity management
Customer Name JP Morgan Chase Bank
  • Attach files
  • Admin
    Scott Brokaw commented
    20 May 02:12pm

    11.7 has the same requirements re: local accounts during installation. The removal of this requirement is specific to containerization in Cloud Pak for Data.

    Note: you should be able to configure post-install the accounts to be non-local in 11.5/11.7.

    Credential mapping is a different requirement, but this can be avoided in 11.x by sharing the registry enabling DataStage Engine to use PAM instead.

    Please open a ticket with support if you need additional details.

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    20 May 01:48pm

    Cloud PAK is not JPMC approved, So if we install 11.7 version we will overcome having dependency on local accounts/static password during installation & post installation? correct?

    I hope this will resolve having id/static password which will require while credential mapping also(Suite user to OS users) as our new Security policy does not allow us to keep any password.

  • Admin
    Scott Brokaw commented
    20 May 01:23pm

    The requirement to have Local OS accounts for installation is removed via our containerized deployment option for DataStage. You can deploy this by leveraging Cloud Pak for Data DataStage.

    FYI, I would suggest trying to install 11.7 or Cloud Pak for Data 2.5 or 3.0 coming out next month instead of version 11.5 as 11.5 will be going out of support on Apr. 30th, 2021.

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    20 May 09:41am

    Hi Team,

    Is it possible to get exact "Expected time of completion" for this request?

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    19 May 05:39pm

    Any update on this?

    Thx

NOTICE TO EU RESIDENTS: per EU Data Protection Policy, if you wish to remove your personal information from the IBM ideas portal, please login to the ideas portal using your previously registered information then change your email to "anonymous@euprivacy.out" and first name to "anonymous" and last name to "anonymous". This will ensure that IBM will not send any emails to you about all idea submissions