IBM GC28-1920-01 manual Concepts, Check

OS/390	OpenEdition	DCE single signon support uses to sign in an authentica
OS/390	user to	DCE.

The RACF support for OS/390 OpenEdition DCE includes:

Ÿ

The

DCE

segment, which contains

DCE information associated with a RAC

user

Ÿ

The

KEYSMSTR

class,

which holds a key to encrypt the DCE password

Ÿ

The

DCEUUIDS

class,

which

is

used

to

define

the

mapping between

RACF

user

ID

and

the corresponding DCE principal UUID

Ÿ

Callable

services

that:

–

Check

a

user's

authority to

a

RACF

resource

–

Set

or

retrieve

fields

from

a

user profile

DCE

segment

–

Set or retrieve a DCE password

–

Determine

the

identity

of

a

DCE client

ŸEnhancements to RACF commands to allow users to create, update and

display information in the DCE user profile segment:

–ADDUSER

–ALTUSER

–LISTUSER

Ÿ Enhancements to RACF utilities:

– SMF data unload utility

–Database unload utility

–Remove ID utility

Ÿ	Enhancements	to	the ACEE		to	identify		a	DCE	client
Ÿ	Enhancements	to	RACF	ISPF	panels		for	the	DCE	user profile	segment
OS/390 OpenEdition			DCE	provides		two	utilities		to	administer DCE	information

the RACF database and to create cross-linking information between the database and the DCE principal registry:

ŸMVSIMPT

ŸMVSEXPT

For more information on these utilities,OpenEditionseeDCE Administration .Guide

RACF interoperation with DCE requires the following software:

Ÿ	OpenEdition/MVS Release 3 (HOM1130) plus					APAR OW15865
Ÿ	C	Run	Time	Library	(JMWL550) plus APAR PN75309
To	enhance the security of DCE passwords					stored in the RACF databas
might		want	to	use an	encryption product.	You are encouraged to consi
the IBM Integrated Cryptographic Service						Facility (ICSF) Version 1 R
your MVS operating system. This product provides DES encryption-level
protection.
For an overview of DCE technology and terminology,DCE: Understandingsee							the
Concepts.

Chapter 2. Release Overview7