Using External Security for CA Datacom › Security Interfaces, CA-ACF2 (z/OS and z/VSE) › Defining Resources

Defining Resources

CA ACF2 translates eight-character resource classes into three-byte CA ACF2 resource type codes using CA ACF2 GSO CLASMAP records. The documented CA Datacom resources DTSYSTEM, DTADMIN, DnTABLE, and DTUTIL are processed by default by CA ACF2 using the first three characters of the resource names: DTS, DTA, DnT, and DTU unless there is a matching CLASMAP entry that translates (maps) the resource class to a specific three-byte resource type.

*DnTABLE - DTTABLE 
           DXTABLE
           DCTABLE
           DFTABLE
           DGTABLE
           DHTABLE
           DPTABLE
           DQTABLE
           DRTABLE
           DSTABLE

For more information about these CA Datacom resources, see Setting Up Resource Classes. If the CA Datacom resource rules contain masking in the $KEY, the CA ACF2 resource type must be made resident. Defining the resource types in the GSO INFODIR as follows can accomplish this:

SET CONTROL(GSO)
CHANGE  INFODIR  TYPES(R-RDTA,R-RDTU,R-RDCT,R-RDFT,R-RDGT, R-RDHT, R-RDPT, R-RDQT,R-RDRT,R-RDST,R-RDTT,R-RDXT)  ADD

Some sites may have a site defined CLASMAP for a resource class mask "********" mapping to a TYPE code of SAF. In this case, the default for undefined resource classes is SAF rather than the first three characters of the resource class. To override this specific CLASMAP, entries should be added for each CA Datacom resource class.

SET CONTROL (GSO)
SET SYSID (sysid)
INSERT CLASMAP.qual RESOURCE(class) RSRCTYPE(typecode)

When changing GSO records, remember to issue the REFRESH command and subsequently any other appropriate commands, such as RELOAD, REBUILD, and so on.

In the example just shown, the following descriptions of the variables (the words in lower case letters) apply:

sysid

Specifies the four-character SYSID.

qual

Specifies a label up to nine characters appended to CLASMAP. The period shown in the example is optional but if used counts as one of the nine characters.

class

Specifies an explicit eight-character Resource Class from CLASS keyword on RACROUTE macro.

typecode

Specifies the explicit three-character Resource Type Code associated with the Resource Class. If not specified, CA ACF2 uses the first three characters of the RESOURCE as RSRCTYPE.

The following example shows what to code to override the CLASMAP resource class mask "********" to a TYPE code of DTS for the DTSYSTEM resource class:

SET CONTROL (GSO)
SET SYSID (SYS1)
INSERT CLASMAP.DTS RESOURCE(DTSYSTEM) RSRCTYPE(DTS)

Following is an example showing how to define the DTADMIN resource class:

SET CONTROL (GSO)
SET SYSID (SYS1)
INSERT CLASMAP.DTA RESOURCE(DTADMIN) RSRCTYPE(DTA)