Keywords › REALMNAME Keyword—Specify Local and Foreign Realm Name

REALMNAME Keyword—Specify Local and Foreign Realm Name

Valid on z/OS.

Use the REALMNAME keyword to specify the fully qualified names of both the local realm name and the foreign realm name in a trust relationship.

This keyword has the following format:

TSS ADDTO(SDT) REALM(realm‑label) 
               REALMNAME('fully‑qualified‑name')
               KERBPASS(password)

fully‑qualified‑name

Specifies the fully qualified name of the foreign realm.

Can be any character except the (X'61') character. Do not use any of the EBCDIC variant characters to avoid problems with different code pages.

Use the single quotes if:

• Parentheses, commas, blanks, or semicolons are entered as part of the name, the character string must be enclosed in single quotes.
• A single quote is part of the name and the entire character string is enclosed in single quotes, use two single quotes together to represent each single quote with the string.
• The first character of the name is a single quote. Enter the string within single quotes, with two single quotes entered for the single quote.

Regardless of the case used, CA Top Secret rolls the name to upper case. This does not ensure that a valid REALMNAME has been specified.

Maximum length: 240 characters

This keyword is used with:

• The commands ADDTO, REMOVE, REPLACE, and LIST
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• MISC3(SDT) authority
• MISC8(LISTSDT) authority to list KERBNAME in the SDT

Example: REALMNAME keyword

This example creates a foreign realm SDT record with a principal name of LOCAL.CA.COM and a realm password of children:

TSS ADDTO(SDT) REALM(KERBFOR1)
               REALMNAME('LOCAL.CA.COM/KRBTGT/FOREIGN.SERVER_1')
               KERBPASS(CHILDREN)