IBM GC28-1920-01 Components for, Release, Summary of, Class Descriptor Table CDT, Chapter, OS/390

Page 37
Chapter

Chapter

3. Summary of

Changes

to RACF

Components for

 

 

OS/390

Release 2

 

 

 

 

 

 

This chapter summarizes the new and changed components

of OS/390

Relea

 

Security

Server

(RACF). It

includes summary charts for

changes to

the

Ÿ Class descriptor table (CDT)

ŸCommands

ŸData Areas

ŸExits

ŸMacros

ŸMessages

ŸPanels

ŸPublications Library

ŸRoutines

ŸSYS1.SAMPLIB

ŸTemplates

ŸUtilities

Class Descriptor Table (CDT)

Figure 6 lists the new classes provided in the IBM-supplied class des (ICHRRCDX). For each class, a corresponding entry has been added to IBM-supplied router table (ICHRFR0X). The class names (when the classe profiles) are general-use programming interfaces (GUPI) for ICHEINTY a

RACROUTE.

For more information, OS/390see Security Server (RACF) Macros and .Interfaces

Figure 6

(Page 1

of

2). New Classes

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Class Name

 

Description

 

 

 

 

 

 

 

 

Support

 

 

 

 

 

 

 

 

 

 

 

ALCSAUTH

 

This

class

contains

general

resource

profAirlineles forControl

 

 

 

functions

and facilities of the Airline

System/MVSControlSystem

 

 

 

(ALCS)

Version

2

Release

2

product,

and (ALCS/MVS)optionally

 

 

 

for functions and facilities of customer-written

 

 

 

applications that run under ALCS Version 2

 

 

 

 

Release 2.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

CBIND

 

This

class

controls

the client's

ability

toSOMobjectsbind to

the

 

 

SOMobjects

for MVS server. The naming

 

for

MVS

 

 

 

convention for profiles in the CBIND class is:

 

 

 

SOM.DSOM.server-name

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

DCEUUIDS

 

Discrete

profiles in this class define

OS/390the

mapping

 

 

 

between a user's RACF user ID and the OpenEdition

 

 

 

corresponding

DCE

principal

UUID. Profile DCEnames

 

 

 

can be in either of the following forms:

 

 

 

 

principal_uuid

 

 

 

 

 

 

 

 

 

 

 

 

home_cell_uuid.principal_uuid

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

DIRECTRY

 

This

class

controls

protection of

shared RACFfile1.10system

 

 

 

(SFS)

directories

on

VM.

 

 

 

 

for

VM

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 Copyright IBM Corp. 1994, 1996

13

Image 37
Contents OS/390 Security Server RACF Planning Installation and MigrationPlace graphic in this area. Outline is keyline only. DO NOT PRINT Page OS/390 1996. All Second Edition, SeptemberPage Page Migration ContentsCustomization Considerations Administration ConsiderationsAuditing Considerations Index Operational ConsiderationsChapter 10. ApplicationPage Figures Page Notices Trademarks About This Book How to Use ThisWho Should Use This Book xiiiSoftcopy Publications Where to Find More InformationŸ The OS/390 Security Server RACF Information , PackageSK2T-2180 ServerElements of Security RACF Installation - Student GG24-3971Notes Administration, H3927Using the Ÿ Tutorial Options for Tuning GG22RACFIBM Discussion Areas Other Sources of InformationInternet Sources listserv@uga.cc.uga.eduTo Request Copies of Publicationsxviii OS/390Features Product ServiceŸ OpenEditionOSA/SF V2R5TSO/EPage Summary of Changes Page Chapter 1. Planning Migration Planning ConsiderationsMigration Administration Considerations Installation ConsiderationsCustomization Considerations Operational Considerations Auditing ConsiderationsApplication Development Considerations General User ConsiderationsPage New and Enhanced Support Chapter 2. Release Overviewidentifies OS/390 OpenEdition DCEfunction introduced in OS/390 ReleaseCheck ConceptsAuditing the Passing of Access Rights Authorizing and Auditing Server Access to the CCS and WLM ServicesOS/390 OpenEdition SOMobjects for MVSRRSF Network Multisystem Nodesnon-main systems Year OS/390 Enable and Disable Functions TARGET 1.10 NetViewclasses Facilityupdated for Function Not Upgradedidentifies function thatRelease Components for3. Summary of Class Descriptor Table CDTlists classes Commandswhich thereChapter 3. Summary of Changes to RACF Components for OS/390 15Release CommandExits Data Areaslists changed general-use programming interface GUPI data areMessages MacrosFigure 12 lists changes RACF macrosChanged Messages New MessagesMessages RACF Database Split/Merge Utility IRRUT400Publications Library PanelsRoutines Figure 13 lists RACF panels that areTemplates SYS1.SAMPLIBFigure 16 identifies changes to RACF members of SYS1.SAMPLIB RACROUTE REQUEST=EXTRACTFigure 18 lists changes to RACF utilities for OS/390 Release UtilitiesTemplate 0280 UtilityRACF Planning Installation and Migrationfor RACF OS/390 Security Server RACF Planning Installation and forMigrationChapter 4. Planning Considerations Migration StrategyHardware Requirements RACF Planning Installation and Migrationfor RACF 2.1, andSoftware Requirements RACF Migration and Planning for RACFCompatibility Considerations for Remote Sharing CompatibilityRequirements Page Enabling RACF Chapter 5. Installation ConsiderationsConsiderations Networksconfigured installationare in your existing workspace data sets when you install multisystem Rmust Chapter 5. Installation Considerations29nodename prefixsysname local-luprefix.local-node.local-node .INMSG Virtual Storage RACF Storage ConsiderationsThis section discusses storage considerations for RACF Figure 21 estimates RACF virtual storage usage, for planning purposesSubpool Customer Additions to the CDTOS/390 Release Templates for RACF oninformation, OS/390see Security Server SystemExit Processing Chapter 6. Customization Considerationsand IRRSXT00 Effects of OS/390 OpenEdition DCERACROUTE REQUEST=DEFINE Preprocessing Exit ICHRDX01 IRRSXT00 Installation ExitServer RACF Security Administrators. Guide Chapter 7. Administration ConsiderationsCross-Linking Between RACF Users signonSignon to DCEUUIDS ClassActivating OS/390 OpenEdition DCE Application Considerations single signon restrictionsOpenEditionsee DCE Administration .Guidethe DCE Encryption Key Library Reference OpenEdition Planning, and inOS/390 OpenEdition Programming AssemblerThreads and Restrictions Changes to RACF Authorization Processingcallable servicepthread orsecuritynp Utility Rdceruid Callable ServiceEnhancements to the SYSMVIEW Chapter 7. Administration Considerations43Page SMF Records Chapter 8. Auditing ConsiderationsAuditors Guide and OS/390 Server RACF MacrosAuditing New OS/390 ServicesInterfaces Auditing SystemView for MVS Support Auditing OS/390 OpenEdition DCE SupportReport Writer SMF Data Unload UtilityPage OS/390 Security Server RACF Command Language Referencefor more CommandChapter 9. Operational Considerations Enabling and DisablingPage 2000 Support Chapter 10. Application Development ConsiderationsServers 01yydddFpthread the securitynp New Application Services and SecurityNew Application Authorization ServiceChanges to the Class Descriptor Table Programming InterfacesŸ “Routines” on page Ÿ “Macros” on page Ÿ “Templates” on page Ÿ “Utilities” on pageConsiderations Chapter 11. General UserOpenEdition Reference forPage APAR OW14451 Chapter 12. NJE ConsiderationsOW08457 After Applying the PTFOW08457 Actions RequiredUACC NODESGROUP APAR OW15408FAILSAFE Page Migrating an Existing Chapter 13. ScenariosNodes RRSFOn MIAMI2 prefixTARGET NODEMIAMI2 SYSNAMESYSTEM2 LOCAL OPERATIVEprefixTARGET NODEORLANDO DELETE prefixTARGET NODEMIAMI2 DELETEOn ORLANDO RACF DiagnosisDELETE Note The prefixTARGET NODEORLANDO OPERATIVE PREFIX... PROTOCOL... WORKSPACEaccess Glossarydirection Page Seeinventory Seegeneral-use programmingprogramming Seemultisystem Seelogicallogical supervisory other.single-systemtask segment andDFP classes continued Index Acontinued Page SFSCMD SERVERKEYSMSTR utilitiescontinued Page Now you can! TheIBM Online Library Productivity IBM Edition OS/390 Security Server RACF Information Page Page comments Communicating Your Comments to IBMOS/390 Security Server RACF Planning Installation and Migration Readers Comments - Wed Like to Hear from YouPublication No. GC28-1920-01 Note CopiesREPLY MAILBUSINESS IBMPage Drop in Back Cover Image Here IBMGC28-192ð-ð1