Operations › Security Options › CA-ACF2 Security Exit Installation

CA-ACF2 Security Exit Installation

Use these steps to install CA IDMS Enforcer as a subordinate exit to the CA-ACF2 security exit:

• Step 1--Modify the Prototype CA-ACF2 Exit — A standard IBM linkage call must be added to the prototype CA-ACF2 exit. This call should load a V-type address constant of SUBUXIT for every possible exit command type. If the command is a SIGNON command, SUBUXIT should only be called if the return code is less than eight.

  After modification, the CA-ACF2 exit should be reassembled. It is assumed that the CA-ACF2 exit does not use the User Work Area full word in the User Exit Control Block, and that parameters are passed intact from the CA IDMS Utility.

• Step 2--Relink the CA IDMS Utility — Alter the appropriate linkage edit statements from the initial product installation to change the name of the CA IDMS Enforcer exit. To alter the name, use the CHANGE command in the following sequences for the target online or batch compiler:

Online

 INCLUDE SYSLIB (IDDUXIT)        CA-ACF2 Prototype
      CHANGE IDDUXIT(SUBUXIT)
      INCLUDE LOADLIB(IDDUXITA)

Batch

 INCLUDE SYSLIB(IDDUXIT)         CA-ACF2 Prototype
      CHANGE IDDUXIT(SUBUXIT)
      INCLUDE LOADLIB(IDDUXITB)

See Exhibit 5.3 for a list of compilers containing user-exit support. Activating enforcement using CA IDMS compiler user exits is also described in this chapter.