– The first check uses the client ACEE. This is the ACEE that is ass with the current task. If the request is successful, the secon performed.
–The second check uses the ACEE associated with the server. This same ACEE that is associated with the address space.
When | each of these checks occurs, the RACF exits ICHRCX01 and ICH |
are | invoked. |
ŸAuthenticated client ACEE
When | an | authenticated | client | ACEE is used in an | access control decis | |
this | ACEE | is | used in | the access control decision. Audit records rec | ||
contain | an | additional | relocate | section indicating | that this authorizat | |
was processed using an ACEE created on behalf of an unauthorized application.
IRRSXT00 Installation Exit
IRRSXT00 is invoked by the SAF callable services router before and aft called. If your system already uses the IRRSXT00 installation exit, yo review this exit to be sure the following are true for the R_dcein callable services:
Ÿ IRRSXT00 is capable of executing in either problem or supervisor st
Ÿ IRRSXT00 does not expect to receive control in a system storage pr key
RACROUTE REQUEST=DEFINE Preprocessing Exit (ICHRDX01)
Processing of a RETPD value specified via the RACROUTE REQUEST=DEFINE preprocessing exit has changed. Formerly, a RETPD value specified in an ICHRDX01 exit was not recorded in the profile when a generic profile defined, unless RETPD was also specified via command. Now, a RETPD value
specified | in an | ICHRDX01 exit is picked up. If you do not want the |
picked up | when | creating a generic profile, you should modify your ex |
RETPD value | only | when processing a tape profile. |
36 OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration