The PASSWORD command is used to provide CA Disk with any password necessary to carry out the functions requested in the command stream. Note that a catalog's master password is not required to scan a VSAM-password-protected catalog. Therefore, you need not specify any password to access a catalog. The proper password is required, however, to display passwords on the VSAM cluster data report, and also to archive or backup a cluster if it is password-protected. The command should precede the SCAN command that it is intended to cover. For clarity, we recommend that you specify this command just after the SET command, if any, and before all other commands.
The syntax of the PASSWORD command is as follows:
PASSWORD MASTER=,CATALOGS=
This REQUIRED parameter is used to supply CA Disk with the proper level of password it will need to carry out its requested functions. You can supply any of the following passwords:
The following rules govern when a password is required and the level of authority that is required:
If the catalog is not password-protected, no password is required (even if clusters within the catalog were defined with passwords).
If the REPORT function is being executed, no password is required, regardless of any catalog password protection. However, to display passwords on the cluster data report, the proper password must be specified. If either the catalog's master password or the CA Disk master password is specified, all passwords will be displayed for all clusters that are protected in the catalog. If a cluster password is entered, all clusters will be listed on the report, but the passwords will be suppressed for those clusters that have passwords, which do not match. If no password is supplied, no passwords will be displayed on the report.
If a BACKUP command is executed, for those clusters that are selected and are password- protected, either the catalog's master password, the CA Disk master password, or the cluster's read password must be specified. This same requirement applies for clusters that are being reported on in the cluster internal analysis report (CIA). In fact, you must supply the control password for the data set (if one exists) because CA Disk must read the cluster with control interval access to produce the report.
If ICF catalogs are to be backed up (exported), the highest level password for each catalog should be specified, or the CA Disk master password. If not properly specified, and unless attempts=0 is in effect, the task will wait while the operator is prompted for the password.
If an ARCHIVE command is executed, for those clusters that are selected and are password-protected, either the catalog's master password, the CA Disk master password, or the cluster's master password must be specified.
Specify the catalog name for which the password value is to be used. If this parameter is omitted, CA Disk will use the password specified on the MASTER= parameter for all catalogs that are specified on SCAN commands for which no explicit password is specified via the PASSWORD command. If more than one PASSWORD command is specified that does not name a catalog explicitly, the most recent PASSWORD specified without a catalog name will take precedence for any succeeding catalogs named on a SCAN command that had no PASSWORD explicitly named for them. (See the example on Complex DSCL Command Sequences for further clarification of PASSWORD substitution rules.)
Because the password is specified on a separate command, it can be included from a different source than the remaining CA Disk commands. Creating a protected data set containing the PASSWORD command and concatenating this data set ahead of the typical CA Disk input set is one way to implement an easily maintained secured environment. When it becomes necessary to modify the password, simply replace the PASSWORD command also. This allows users to continue to process without knowledge of the required or changed security. CA Disk will suppress the printing of all passwords on the CMDPRINT output.
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|