vVALIDATE_MSG

vVALIDATE_REPLY_MSG

CAUTION:

If the security exit is used, Sterling Connect:Direct relies on it for user ID authentication. If the security exit is not implemented correctly, security can be compromised.

GENERATE_MSG

Sterling Connect:Direct sends a generate message to the user exit program at the start of a session to establish a security environment. The PNODE sends the GENERATE_MSG to the security exit to determine a user ID and security token to use for authentication on the SNODE. The GENERATE_MSG contains:

vSubmitter ID

vPNODE ID

vPNODE ID password, if user specified one

vSNODE ID

vSNODE ID password, if user specified one

vPNODE name

vSNODE name

GENERATE_REPLY_MSG

The user exit program sends a reply message to Sterling Connect:Direct. The GENERATE_REPLY_MSG contains:

vStatus value of zero for success or non zero for failure

vStatus text message (if status value is failure, status text message is included in the error message)

vID to use for security context on the SNODE side (may or may not be the same ID as in the generate message)

vSecurity token used in conjunction with ID for security context on the SNODE side

VALIDATE_MSG

Sterling Connect:Direct sends a validate message to the user exit program. The SNODE sends the VALIDATE_MSG to the security exit to validate the user ID and security token received from the PNODE. The VALIDATE_MSG contains:

vSubmitter ID

vPNODE ID

vPNODE ID password, if user specified one

vSNODE ID

vSNODE ID password, if user specified one

vPNODE name

vSNODE name

vID to use with security token

vSecurity token (password, PASSTICKET, or other security token)

Chapter 5. Writing User Exits 81

Page 87
Image 87
IBM 4J manual Generatemsg, Validatemsg Validatereplymsg