CNFUVAR Keyword—User Filter

Valid on z/OS.

Use the CNFUVAR keyword to specify the CA Top Secret user defined criteria that acts as a filter to assign users to an ACID. The site criteria are in addition to the digital certificate name filter defined in a corresponding ADD CERTMAP command. The CRITMAP command is used when MULTIID and CRITERIA are used on the CERTMAP command. When CNFUVAR is defined on the CRITMAP command, the special ACID name, MULTIID, along with the CRITERIA name on the CERTMAP command, tell CA Top Secret that if the subject and/or the issuer name information matches, then search the CRITMAP records for a match on the variables defined by the site before assigning an ACID to the user.

This keyword has the following format:

TSS ADDTO(acid) CRITMAP(recid)
                CNFUVAR(site variable list)

site variable list

Specifies the criteria that act as a filter to assign users to an ACID. May contain an asterisk (*) for masking.

Range: Up to 8 characters.

This keyword is used with:

The commands ADDTO, LIST, REMOVE, and REPLACE
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
ACID(MAINTAIN) authority

Examples: CNFUVAR keyword

This example defines a site variable filter that assigns the accessor ID of BANKU to any users who access the system using the BANKAPP application:

TSS ADDTO(MULTIID) CERTMAP(BOB)
                   DCDSN(model.cert)
                   IDNFILTER('OU=')
                   SDNFILTR(('OU=')
                   CRITERIA(CNFAPPL=&CNFAPP)
                   LABLCMAP('Bobs Tellers')

TSS ADDTO(BANKU) CRITMAP(BOB)
                 CNFUVAR(CNFAPPL=BANKAPP)