© Xephon plc 2002May 2002283 A program to facilitatedecentralized RACF administration68 Inside IBM – IBM mainframesecurity since October 200082 RACF r
10© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.consists of the field name (USRNM), f
100© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.• The RACF conversion specialist (10
101© 2002. Reproduction prohibited. Please inform Xephon of any infringement.We spent a fair bit of time on this activity, but the effort was well
102© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.BUILDING THE RACF DATABASEBefore sta
103© 2002. Reproduction prohibited. Please inform Xephon of any infringement.The biggest challenge was to translate ACF2 rules into RACF datasetan
104© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.used to enforce password controls, s
105© 2002. Reproduction prohibited. Please inform Xephon of any infringement.userids needed passwords! In such special cases, ACF2 alloweduserids
106© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Remote security – inexpensive firewa
107© 2002. Reproduction prohibited. Please inform Xephon of any infringement.The CD-ROM included is common to this router and Belkin’s 5- and8-por
108© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.http://web.belkin.com/support/faq_qa
109© 2002. Reproduction prohibited. Please inform Xephon of any infringement.Maximum users 253LAN ports 4 x 10/100Mbps (autosense)LAN port status
11© 2002. Reproduction prohibited. Please inform Xephon of any infringement. say userid 'Users connected to' 'TECHSUP'
110© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.INSTALLING THE SOFTWAREDouble clicki
111© 2002. Reproduction prohibited. Please inform Xephon of any infringement.CONCLUSIONSince 11 September, interest in security has created a huge
112© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Information point – reviewsIBM SECUR
113© 2002. Reproduction prohibited. Please inform Xephon of any infringement.There’s also a lot of information from the Research link on theSecuri
114© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.One step above, at http://utkvm1.utk
RACF newsCA’s eTrust PKI 2.0 focuses on rapiddeployment of Public Key Infrastructure(PKI) and can also be used by eTrust SingleSign-On to provide acce
12© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.AuthprofAuthprof is a special profile
13© 2002. Reproduction prohibited. Please inform Xephon of any infringement.For example, READ access to ‘DATASET.BASE.?’ allows auser to read any
14© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.profile that can be repeated within t
15© 2002. Reproduction prohibited. Please inform Xephon of any infringement.USERDATAThe USERDATA field defined in the RACF templates is provided b
16© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.authorized library (available in the
17© 2002. Reproduction prohibited. Please inform Xephon of any infringement.TestingDuring testing, it’s advisable to disable the authority MCINTY
18© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Figure 4 shows the messages with thei
19© 2002. Reproduction prohibited. Please inform Xephon of any infringement.MCI05E: SEGMENT NAME INVALIDError (12) – Specified SEGMENT name not a
2RACF UpdatePublished byXephon27-35 London RoadNewburyBerkshire RG14 1JLEnglandTelephone: 01635 38030From USA: 01144 1635 38030E-mail: fionah@xephon.
20© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.REFERENCES• OS/390 V2R8.0 Security Se
21© 2002. Reproduction prohibited. Please inform Xephon of any infringement.THE CODE**************************************************************
22© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.*
23© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* RGROUP USE TO FORCE A FIELD TO BE PROCESSED AS A REPEAT- @MC
24© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.*
25© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* SPECIAL FIELDS **
26© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.*
27© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* USERDATA FIELD NOT FOUND **
28© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. @TRACE LCLA &NDX
29© 2002. Reproduction prohibited. Please inform Xephon of any infringement. LA R9,1(R9) LOAD 3RD BASE @MC6
3© 2002. Reproduction prohibited. Please inform Xephon of any infringement.A program to facilitate decentralized RACFadministrationThis article de
30© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.** CALL TSO PARSER* CALLTSS
31© 2002. Reproduction prohibited. Please inform Xephon of any infringement. ICM R2,3,CLASS+4 LEN CLASSNAME BZ CLSØ1
32© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. MF=(E,INTY1) O
33© 2002. Reproduction prohibited. Please inform Xephon of any infringement. SLR R2,R2 ICM R2,1,AUTHPREF DO WE USE A PREFI
34© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. XC UDLEN,UDLEN CLEA
35© 2002. Reproduction prohibited. Please inform Xephon of any infringement. ICM R1,15,FIELDS FIELD NAME ADDRESS FROM PARMS
36© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.* L R2,USRDLEN GET
37© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* SO WE CAN USE THE SAME CODE LATER TO PROCESS THE FIELD-NAMES AND*
38© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.* IF CALLER STILL DOESNT HAVE ACC
39© 2002. Reproduction prohibited. Please inform Xephon of any infringement.** CHECK ICHEINTY RETURN CODE*CHKINTY DS ØH LTR R15,R
4© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.MCINTY FEATURESThe main features of MC
40© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. L R4,INTYF+4(R6) TO 1
41© 2002. Reproduction prohibited. Please inform Xephon of any infringement. LA R3,4(R3) ..AND PAST LEN TO NEXT OCC. @MC
42© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.*************************************
43© 2002. Reproduction prohibited. Please inform Xephon of any infringement. LA R3,SELMASK(R3) INDEX INTO SELECTION MASK BYTE @MC
44© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.*************************************
45© 2002. Reproduction prohibited. Please inform Xephon of any infringement.EMSG3A DC CMCIØ3E: ONLY 1 FIELD ALLOWED PER UPDATE*ERR4A DS
46© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. LA R1,EMSG5 LA
47© 2002. Reproduction prohibited. Please inform Xephon of any infringement.EMSG9RC EQU *-3,3 @MC6
48© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. BR R14 EJECT*****
49© 2002. Reproduction prohibited. Please inform Xephon of any infringement. ICM R5,15,USRDLEN TOTAL LEN OF ALL USERDATA LA
5© 2002. Reproduction prohibited. Please inform Xephon of any infringement.whereas the update operations (ADD, REP, DEL) work only onone field.• P
50© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. MVC LINE+LUSRNM+1(*-*),US
51© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* DELETE A SINGLE OCCURRENCE* THIS IS DONE BY MOVING BACK ALL OC
52© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.* EXIT VIA R1Ø
53© 2002. Reproduction prohibited. Please inform Xephon of any infringement. BNE SAUTH1Ø NO, DO NEXT CHECK LR RØ,R2
54© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. ST RØ,RACWA AND
55© 2002. Reproduction prohibited. Please inform Xephon of any infringement. BM SCHK1Ø NO, CONTINUE CHECKING @MC5
56© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.* ON ENTRY: R3 = ADDR DATA
57© 2002. Reproduction prohibited. Please inform Xephon of any infringement.SCNVX DS ØH CLI FLDIND+3,CX HEX ? BNE
58© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. EDMK WORK1(5),VARNO EDIT
59© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* MVC ABCODE,SDWAICD1 SAVE PGM IRPT CODE FOR RETRY RTN.
6© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. FI(PASSDATE.P) Results in: 99365
60© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. ESTAE Ø CAN
61© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* CONSTANTS****************************************************
62© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. RELEASE=1.8.1ACTN2A
63© 2002. Reproduction prohibited. Please inform Xephon of any infringement.* MISCELLANEOUS ICHEACTN DATA FIELDS*ACLUSER DS CL8
64© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290. PROMPT=FUNCTION CODE
65© 2002. Reproduction prohibited. Please inform Xephon of any infringement.FIELDS IKJIDENT FIELDS,LIST,ASTERISK,MAXLNTH=1Ø,CHARSEGNM IKJSU
66© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.AUTHENT DS CL26
67© 2002. Reproduction prohibited. Please inform Xephon of any infringement. IHAASXB , IHAACEE , ICHSAFP , ICHPRCV
68© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Inside IBM – IBM mainframe security s
69© 2002. Reproduction prohibited. Please inform Xephon of any infringement.z800The z800 is a new smaller eserver zSeries below the z900 in capaci
7© 2002. Reproduction prohibited. Please inform Xephon of any infringement.simple field contains binary data that looks like a repeat-group when r
70© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.• PKCS#7 certificate chains.Even thou
71© 2002. Reproduction prohibited. Please inform Xephon of any infringement.after the mid-1960s project to develop seamless communicationbetween p
72© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.CICS TS 2.2CICS TS Version 2.2 includ
73© 2002. Reproduction prohibited. Please inform Xephon of any infringement.gradually with each new release of an MQ product. WebSphere MQhas alwa
74© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.be authorized via Flow Definition Lan
75© 2002. Reproduction prohibited. Please inform Xephon of any infringement.It includes an interface for applications to interact with the WebSEAL
76© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.• Tivoli Policy Director• Tivoli Poli
77© 2002. Reproduction prohibited. Please inform Xephon of any infringement.access control for MQ queues, and protection for data while in queuean
78© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.• The Tivoli User Administration wpas
79© 2002. Reproduction prohibited. Please inform Xephon of any infringement.Tivoli Business Systems Manager (TBSM) monitors availability andperfor
8© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.variable; but all fields found are lis
80© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.• Normal – NPM checks operator ID, pa
81© 2002. Reproduction prohibited. Please inform Xephon of any infringement.The concept is to realize the economies of scale possible byconsolidat
82© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.RACF restructuring: codingThe second
83© 2002. Reproduction prohibited. Please inform Xephon of any infringement.When a new RACF database is created, there are only three groupsdefine
84© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.AUTH1:JERRY SPRINGER 555-12
85© 2002. Reproduction prohibited. Please inform Xephon of any infringement.The highest-level qualifiers must conform to the structure underBUSINE
86© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Figure 2: High-level structure of a s
87© 2002. Reproduction prohibited. Please inform Xephon of any infringement.a high-level division structure for those functions required by RACFan
88© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Figure 3: System or RACF functional g
89© 2002. Reproduction prohibited. Please inform Xephon of any infringement.must be alpha (a throwback to the old HASP days – remember those?),but
9© 2002. Reproduction prohibited. Please inform Xephon of any infringement.Specific occurrencesWhere a specific occurrence of a repeat-group has b
90© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.NAME('ABDULLAH AL-HASSAN')
91© 2002. Reproduction prohibited. Please inform Xephon of any infringement.• # is the SYSTEMS identifier (constant)• x is the single letter prefi
92© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Note the five exclamation marks at th
93© 2002. Reproduction prohibited. Please inform Xephon of any infringement.Creating the database in Access is pretty straightforward. You caneven
94© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.ISPF SCREENS – THE CASE FOR NEW ONESL
95© 2002. Reproduction prohibited. Please inform Xephon of any infringement.If you remember from the previous article, I stated that this processs
96© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.begin the actual build process. But w
97© 2002. Reproduction prohibited. Please inform Xephon of any infringement.note ALL the changes you made. This will be vitally important whenyou
98© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.Converting from ACF2 to RACFFollowing
99© 2002. Reproduction prohibited. Please inform Xephon of any infringement.dataset (PDS). RACF has no such concept. However, RACFdefinitions can
Kommentare zu diesen Handbüchern