Resource Initialization Manager › CAS9INIT CAIRIM Initialization Routine › How CAS9INIT Initializes CAISSF When Security Product Is Not Yet Active

How CAS9INIT Initializes CAISSF When Security Product Is Not Yet Active

If CAS9INIT finds no active security product (for example, when CAIRIM is run before the security product becomes active), the following messages are issued to the system console, prompting the operator to identify the security product:

CAS9075I - SERVICE(CA-RIM/BASE ) VERS(1200) GENLVL(0808AW000)
CAS9115I ‑ INPUT: *
CAS9115I ‑ INPUT: PRODUCT(CAIRIM)  VERSION(CAS9) INIT(CAS9INIT)
CAS9025A ‑ NO SECURITY SYSTEM AVAILABLE
00 CAS9026A ‑ REPLY WITH SECURITY SYSTEM,"ACF2","TSS","RACF" OR
             "N" TO CANCEL

If the reply identifies the security product, CAS9INIT continues to initialize CAISSF.

If the reply is N, the following message is issued and CAS9INIT fails to initialize CAISSF:

CAS9021E ENVIRONMENT ERROR DETECTED. UNABLE TO ADD CAISSF ROUTINES

You can bypass the operator prompt by adding the following parameter statement in the CAIRIM parmlib member, CAW0OPTN(CARIMPRM):

PRODUCT(CAIRIM) VERSION(CAS9) INIT(CAS9INIT) PARM(SSF(value))

value

Indicates one of ACF2, TSS, or RACF.

CAISSF RACF Class Table Parameters

CAISSF needs a RACF Class table to identify how security calls are processed. A default table is created, but certain CA products require additional entries. These entries are described in the documentation for the related product. The control statements for this table are read from a CAIRACF DD statement if it is present in the CAS9 procedure. The following is the format of each of the statements:

RACFCLASS   CA-solution classname,translated classname,
            FASTAUTH=NO|YES,CICS=NO|YES

• Any statement with an asterisk (*) in column 1 is ignored.
• The operation is RACFCLASS and must be followed by at least one blank.
• The CA-solution classname is required and is the value of the class name used by the CA application.
• The translated classname is required and is the value used by RACF to verify proper authorization for access to the given class.
• FASTAUTH=YES means that the Fast RACHECK (FRACHECK) is used to authenticate access to the given class. The default is FASTAUTH=NO
• CICS=YES means that the Fast RACHECK is used with a CICS application. CICS=YES implies FASTAUTH=YES. The default is CICS=NO which means this class entry is not used under CICS.