vVALIDATE_MSG
vVALIDATE_REPLY_MSG
CAUTION:
If the security exit is used, Sterling Connect:Direct relies on it for user ID authentication. If the security exit is not implemented correctly, security can be compromised.
GENERATE_MSG
Sterling Connect:Direct sends a generate message to the user exit program at the start of a session to establish a security environment. The PNODE sends the GENERATE_MSG to the security exit to determine a user ID and security token to use for authentication on the SNODE. The GENERATE_MSG contains:
vSubmitter ID
vPNODE ID
vPNODE ID password, if user specified one
vSNODE ID
vSNODE ID password, if user specified one
vPNODE name
vSNODE name
GENERATE_REPLY_MSG
The user exit program sends a reply message to Sterling Connect:Direct. The GENERATE_REPLY_MSG contains:
vStatus value of zero for success or non zero for failure
vStatus text message (if status value is failure, status text message is included in the error message)
vID to use for security context on the SNODE side (may or may not be the same ID as in the generate message)
vSecurity token used in conjunction with ID for security context on the SNODE side
VALIDATE_MSG
Sterling Connect:Direct sends a validate message to the user exit program. The SNODE sends the VALIDATE_MSG to the security exit to validate the user ID and security token received from the PNODE. The VALIDATE_MSG contains:
vSubmitter ID
vPNODE ID
vPNODE ID password, if user specified one
vSNODE ID
vSNODE ID password, if user specified one
vPNODE name
vSNODE name
vID to use with security token
vSecurity token (password, PASSTICKET, or other security token)
Chapter 5. Writing User Exits 81