Figure 5.

Changes to PSPI Data Areas

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Data Area

 

Description

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Support

 

 

 

 

 

 

 

 

 

 

 

AFC

 

This data area maps the

 

contents

for

 

theAuditabilityOpen

of

 

 

Edition MVS security audit function codessuper.An audituser

 

 

 

function

code

has

been

added

to auditrequwhensts.

 

 

 

ck_priv is called from OpenEdition_spawn

 

 

 

 

 

 

 

 

(BPX1SPN).

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

COMP

 

This data area maps the

 

common

SAF/RACF

 

 

TME

10

GEM

 

 

 

parameter list for Open Edition MVS securityuser

 

 

 

 

functions. A new 24-byte DSECT ADMN has beenadministration

 

 

 

added.

It

includes

addresses

of the forfunctionOS/390-specific

 

 

parameter

list

structure,

 

of the RACF user ID under

 

 

whose authority the service executes, of a fullword

 

 

containing the ACEE address under which this

 

 

 

 

 

service executes, of a caller-supplied area

 

 

 

 

containing

the

subpool

in

which

output

messages

 

 

 

 

are

obtained,

and

of a

 

fullword

containing

a

pointer

 

 

to the RACF command output.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

FAST

 

FASTPLEN,

FASTPVER,

FASTALET,

and

 

 

 

 

 

 

 

DB2

 

 

 

 

 

FASTLOGS

have

been

added.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

FC

 

This data area maps the

 

Open

Edition

 

MVSTME

10

GEM

 

 

 

security

function

codes.

 

A

new

constant

user

 

 

 

 

IRRSEQ00#

has

been

added

 

for

function

coadeministration39 -

 

 

 

R_admin.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

for

OS/390

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

RCVT

 

The

RACF

level

in

this

data

area

has

 

beenNew

FMIDupdated

 

 

 

to 2040, to reflect the

 

new FMID,

HRF2240.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

RFXP

 

RFXPLEN,

RFXPVERS,

RFXALET,

and

 

RFXLOGS

 

 

 

DB2

 

 

 

 

 

have

 

been

added.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SAFP

 

This

data

area

 

has

been

 

updated

to

 

 

rNeflectwFMID the

new

 

 

RACF

FMID,

HRF2240.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Exits

Because two new keywords, ACEEALET and LOGSTR, were added to

RACROUTE REQUEST=FASTAUTH, there are changes to exit processing.

When the ACEEALET keyword is specified on the RACROUTE

 

 

 

 

REQUEST=FASTAUTH

macro,

the

ACEE must be accessed using the ALET in the

 

RFXALET field of the RFXP

parameter

list.

In

all

other

cases,

the

ACEE

accessed

in

the

current

HOME address space. For cross-memory callers,

means

the

ACEE must be accessed using

an

ALET

of

2.

 

 

 

 

When

the

ACEEALET=

keyword

is

specified,

the

sequence

of

exit,

authoriz

and

audit

processing

is

the

same

as

the

sequence for

cross-memory

re

sequence

is:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ŸICHRFX03

ŸAuthorization processing

ŸICHRFX04

ŸAudit processing

16 OS/390 V2R4.0 Security Server (RACF) Planning: Installation and Migration

Page 36
Image 36
IBM OS/390 manual Exits, ICHRFX03, ICHRFX04

OS/390 specifications

IBM OS/390, a versatile operating system, was a cornerstone in enterprise environments and played a pivotal role in mainframe computing. Released in the mid-1990s, OS/390 combined the strengths of IBM's MVS (Multiple Virtual Storage) with new features and enhancements, targeting scalability, reliability, and performance in demanding business applications.

One of the key features of OS/390 was its robust support for multiple users and processes. The system allowed thousands of concurrent users to access applications and data, ensuring high availability and minimizing downtime—a critical requirement for many large organizations. This scalability was supported through various enhancements in memory management and processor scheduling, enabling optimal resource allocation across diverse workloads.

OS/390 was known for its superior workload management capabilities. The Workload Manager (WLM) component allowed administrators to define service policies, specifying how system resources would be allocated according to the priority of tasks. This ensured that critical business processes received the necessary resources while less critical tasks were managed more flexibly.

Another significant characteristic of OS/390 was its commitment to security. The operating system provided comprehensive security features, including user authentication, data encryption, and auditing capabilities. This focus on security was vital for organizations handling sensitive data, ensuring compliance with regulations and safeguarding against unauthorized access.

OS/390 also supported advanced technologies that facilitated integration and development. The system included features like the IBM CICS (Customer Information Control System) for transaction processing and IMS (Information Management System) for database management. These technologies allowed organizations to build robust, high-performance applications tailored to specific business needs.

The ease of network integration was another strength of OS/390. With the advent of the Internet and global connectivity, OS/390 systems could easily interface with various network protocols, enabling businesses to operate in a connected world. This inclusion paved the way for many organizations to expand their capabilities and offer new services, driving digital transformation.

In conclusion, IBM OS/390 represented a significant advancement in mainframe technology, combining scalability, security, and robust workload management. Its rich feature set and support for critical enterprise applications solidified its role as a vital component of many organizations' IT infrastructures, ensuring they could meet their operational challenges head-on while supporting future growth. As technology continues to evolve, the legacy of OS/390 remains influential in the realm of computing.