The kmigrate utility

The kmigrate command is a tool for migrating existing DCE and MVS users to a Kerberos registry managed by a z/OS Network Authentication and Privacy Service server. It is intended to ease the migration of users who are currently using Kerberos services, with our without DCE, to the IBM Kerberos server and to ease the initial population of a Kerberos registry from an existing RACF registry. This tool analyzes the existing RACF and DCE registries and provides a list of suggested RACF commands to prime the Kerberos registry with Kerberos principals. Where necessary, the tool will also suggest MVS userids for these principals. The output of the kmigrate command is a file that can be run as a CLIST to make the RACF changes. No changes are made to the RACF registry until the customer has a chance to review the file and make changes.

The kmigrate tool consists of these files:

You can download these files either by using your browser or by using anonymous file transfer protocol (ftp). From your browser, select "file" and "save as". For anonymous ftp, use the site kmigrate can be found in the directory /eserver/zseries/zos/racf/kmigrate/.

We welcome your comments and questions on the kmigrate utility. Please direct them to the RACF-L mailing list. Subscription information for RACF-L can be found from the RACF-L Discussion List page.


This program contains code made available by IBM Corporation on an "AS-IS" basis. Any one receiving this program is considered to be licensed under IBM copyrights to use the IBM-provided code in any way he or she deems fit, including copying it and redistributing it, except that it may be neither sold nor incorporated within a product that is sold. No license under any IBM patents or patent applications is to be implied from this copyright license.

The software is provided "as-is", and IBM disclaims all warranties, express or implied, including but not limited to implied warranties of merchantability or fitness for a particular purpose.

Contact IBM

Browse z/OS