Converting SNT RDM to TSS Commands

Defining CICS to CA Top Secret › Converting SNT RDM to TSS Commands

Converting SNT RDM to TSS Commands

The CAKSNMIG program can be used to convert CICS Signon Table information into CA Top Secret commands.

Note: The CAKSNMIG program should only be used if you are converting CICS internal security to CA Top Secret.

CICS encourages administrators to convert existing tables from RDM to RDO. In some of its latest releases, no Signon Table (SNT) can even be assembled. CA encourages administrators to convert existing SNT macros to external security commands using the CAKSNMIG utility, whose JCL is shown in the following:

 //TRYIT EXEC PGM=CAKSNMIG,PARM=NOCRE
 //STEPLIB DD DSN=your.tss.library,DISP=SHR
 //DFHSNT DD DSN=yourcics.table.loadlib,DISP=SHR
 //ADDTO DD DSN=your.output.addto.lib,DISP=SHR
 //TSSCMDS DD DSN=your.output.create.lib,DISP=SHR
 //SYSPRINT DD SYSOUT=*
 //SYSUDUMP DD SYSOUT=*

The following DD statements must be completed:

STEPLIB

The file containing the CA Top Secret load library.

DFHSNT

The file containing the DFHSNT load module to be converted.

ADDTO

The file containing the TSS ADDTO statements for OPID, OPPRTY, and OPCLASS keywords.

Note: The LRECL for the output statements must be 80, the BLKSIZE is determined by the Device type.

TSSCMDS

The file containing the TSS CREATE statements unless PARM=NOCRE was coded.

Note: The LRECL for the output statements must be 80, the BLKSIZE is determined by the Device type.

SYSPRINT

The listing of output of both files.

Generation Operation

CAKSNMIG takes the load library containing the assembled SNT as input. The program can be executed with and empty PARM or with PARM=NOCRE:

When the program is executed with no parameter, TSS CREATE commands are routed to the TSSCMDS file and TSS ADDTO commands are routed to the ADDTO file.
When executed with PARM=NOCRE, only the ADDTO file should contain commands. TSSCMDS file output is suppressed.
For the PARM field, code PARM=NOCRE indicates that TSS CREATE statements are not generated for the userids.

It is the administrator's responsibility to edit these files for re‑submission through TSO/batch SYSTSIN. All messages generated for this program are documented in the Messages and Codes Guide.

Sample output from TSSCMDS file is provided in the following.

TSS CREATE(MASTER) TYPE(USER)
                   NAME('CICS USER')
                   DEPARTMENT(CICSDEPT) 
                   PASSWORD(MASTER,,EXP)

TSS ADDTO(MASTER) OPIDENT(MAS)
                  OPPRTY(255) 
                  OPCLASS(1,2,6,18)

TSS CREATE(SAMPLE) TYPE(USER)
                   NAME('CICS USER')
                   DEPARTMENT(CICSDEPT) 
                   PASSWORD(SAMPLE,,EXP)

TSS ADDTO(SAMPLE)  OPIDENT(SAM) ‑
                   OPCLASS(1,10,15,24)