Maintaining Special Security Records › SDT Record › Define KERBLINK Records to the SDT

Define KERBLINK Records to the SDT

Use the ADDTO command to add a KERBLINK record.

To define a new KERBLINK record to the SDT, enter the command:

TSS ADDTO(SDT) KERBLINK(link_name)
               LINKNAME(fully—qualified—name)
               KERBUSER(local_acid)

KERBLINK

Identifies the record. Must be a unique name within the KERBLINK SDT record type.

Range: 1 to 8 characters

LINKNAME

A string which specifies the URL of the foreign realm in which the foreign principal user is defined. The KERBNAME under which the associated (foreign) ACID is defined. The format of this string is:

/.../foreign_realm_URL/foreign_principal_KERBNAME

Note: If the foreign_principal_KERBNAME is not supplied, the definition refers to all Kerberos principal users defined in that specific foreign realm.

KERBUSER

The ACID in the local system to which requested activities is assigned in the local system.

Example: Define KERBLINK records

This example maps USER01 and USER02 foreign principal names to their individual user IDs on the local z/OS system:

TSS ADDTO(SDT) KERBLINK(KERBLK1) 
               LINKNAME('KERB.CA.COM/USER01')
               KERBUSER(PAUL01) 

TSS ADDTO(SDT) KERBLINK(KERBLK2) 
               LINKNAME('KERB.CA.COM/USER02')
               KERBUSER(NADIA01)