Previous Topic: Step 5:  Create the SRVPAM EXEC

Next Topic: Configuring CA Top Secret for Use With the PAM Server

Step 6: Define the PAM Server ID to security

The following commands are an example used to define the PAM Server user ID and started task information in the CA Top Secret database:

First define a PAM group ACID:

TSS CREATE(PAMGROUP) NAME(“PAM Server Group”) TYPE(GROUP) DEPT(OMVSDEPT)
TSS ADD(PAMGROUP) GID(nn)

Now create the server ACID:

TSS CREATE(PAMSERVE) NAME(“PAMSERVE Service Machine”) PASS(password,0) DEPT(deptname) TYPE(USER) FAC(VM) NODSNCHK NORESCHK
TSS ADD(PAMSERVE) UID(0) GROUP(PAMGROUP) DFLTGRP(PAMGROUP)
TSS PERMIT(PAMSERVE) IBMFAC(ICHCONN) ACCESS(ALL)
TSS PERMIT(PAMSERVE) VMMD(TCPMAINT.,CAIMAINT.0+91) ACCESS(READ)
TSS MODI(OMVSTABS)