Implementing Security for IMS › Considerations for the IMS AUTH Call › Undefined Resources

Undefined Resources

If the resource is not defined in the SECURITY gen, IMS will make requests through the standard security interface based on the CLASSNAME parameter in the AUTH call I/O area as follows:

I/O Area CLASSNAME

Defined by IBM documentation for the AUTH call.

Standard RESCLASS

Based on the standard default value RCLASS=IMS in the Stage 1 SECURITY macro.

Generated RESCLASS

If you specify a non-default value, that is RCLASS=xxx, the AUTH call will generate the RESCLASS for its security queries.

CA Top Secret does not by default supply support for either the Standard or Generated RESCLASS used by the AUTH call. If you choose to define these resource classes directly to CA Top Secret, you must define them to the RDT. In addition, you must provide separate security permissions for these inquiry resource classes, which can duplicate security already present for LCF, OTRAN, PSB or DBD security.