Invoked Sub-functions › Controlling Applications that Invoke R_dcekey

Controlling Applications that Invoke R_dcekey

Authorized components can invoke the R_dcekey callable service to:

• Set a DCE password
• Retrieve a DCE password
• Retrieve an LDAP bind password

Applications that do not run in system key or in supervisor state require READ access to the BPX.SERVER or IRR.RDCEKEY resource in the IBMFAC class.

To establish read access to R_dcekey

1. Enter the commands:

   TSS ADD(tssdept) IBMFAC(IRR)
   

   TSS ADD(tssdept) IBMFAC(BPX)
   

   The IBMFAC is owned.

2. Enter the commands:

   TSS PER(tsscomp1) IBMFAC(BPX.SERVER)
                     ACCESS(READ)
   

   TSS PER(tsscomp1) IBMFAC(IRR.RDCEKEY)
                     ACCESS(READ)
   

   The permit is added to the component.