Web Services › How to Enable Security Access to Web Services › Security Software Customization for Web Services › Configure IBM RACF

Configure IBM RACF

This section provides basic instructions for customizing IBM RACF to allow the WSEWSSTC started task to initialize correctly. According to the RACF Security Administrator Guide, you can use either of the following methods to define a started task to RACF:

• Define a new profile to the STARTED class (recommended by IBM)
• Add a new entry in the started procedures table (ICHRIN03)

Additionally, you must assign a RACF user ID to the started task WSEWSSTC and assign the user ID to a RACF group authorized to initiate started procedures.

To define a RACF user ID for WSEWSSTC, use the ADDUSER command and associate it with your existing started task RACF group, as follows:

ADDUSER user_name DFLTGRP(default_group) OWNER(default_group) NOPASSWORD

user_name

Specifies the name of the new RACF user ID. This name should be the same as the name of the started task member in your PROCLIB that Web Services uses.

default_group

Specifies the default group that contains all system started tasks; for example, STCGROUP.

Note: If you do not know the name of the default group, see your RACF administrator. For detailed information to implement the RACF STARTED class or to modify the started task table (ICHRIN03), see the RACF documentation.

Note: This command is only an example. For more information on using the ADDUSER command, see your RACF administrator.