Keywords › KERBUSER Keyword—Map Foreign Principal Names

KERBUSER Keyword—Map Foreign Principal Names

Valid on z/OS.

Use the KERBUSER keyword to map foreign principal names to individual user IDs.

To map a unique CA Top Secret User ID to each foreign principal, specify the foreign realm name and the foreign principal name. To map the same CA Top Secret User ID to every foreign principal in the foreign realm, you need only specify the foreign realm name. In each case, you specify the local User ID using the KERBUSER option.

This keyword has the following format:

TSS ADDTO(SDT) KERBLINK(label‑name)
               LINKNAME('fully‑qualified‑name')
               KERBUSER(userid)

userid

Specifies the User ID on the local z/OS system.

This keyword is used with:

• The commands ADDTO, DELETE, REMOVE, REPLACE, and LIST
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) and MISC4(KERBUSER) authority

Example: KERBUSER keyword

This example maps USER's foreign principal name to the individual user ID on the local z/OS system:

TSS ADDTO(SDT) KERBLINK(KERBLK1)
               LINKNAME('KERB.CA.COM/USER01')
               KERBUSER(PAUL01)