Addressing Security Requirements › Define the Started Task User ID for CA DSI Server

Define the Started Task User ID for CA DSI Server

The DSILID and DSIACID jobs create the started task user id and assign appropriate security authorizations for CA DSI Server installation.

Important! This should have been completed as part of the CA LDAP Server install. If not, use this procedure to configure CA DSI Server in accordance with your site specifications.

Follow these steps:

1. Edit the job to define STC user IDs. Change the HOME in the job to the directory name where you installed LDAP.
   • CA ACF2 - DSILID in your.ldap.hlq.CDT9JCL
   • CA Top Secret - DSIACID in your_ldap_hlq.CDT9JCL
2. Submit the job.
3. Verify the job output.

   The STC user IDs are defined for the installation.

4. Update the dsi.env file to add the correct directory name (PATH and LIBPATH).

   The dsi.env file is updated.

5. Update the dsi.conf file to address the following areas:
   1. Review the documentation in the file for each of the preset values and change any that you need to. You must change the host option. Comment out the line or supply a valid domain name. If you provide a domain name, the domain name must be associated with one of the interfaces of the system on which the DSI server is to run. In this case, the DSI server accepts connections only if they arrive over the designated interface. Commenting out the line allows the DSI server to accept connections that arrive over all interfaces.
   2. Review the port setting. The default in the file is 1490. If this port is not acceptable, change it to a setting that meets your site-specific requirements.

   The dsi.conf file is updated.

6. Edit the DSIR15 STC PROC in SAMPJCL to change all occurrences of INSTALL_DIR to the path name of the directory that contains the HFS files.

   The DSIR15 STC PROC is updated.

7. Copy the DSIR15 STC PROC from SAMPJCL into your proclib.

   The DSIR15 STC PROC is in your proclib.

8. Start the STC using the DSIR15 job.