Keywords › KERBPASS Keyword—Foreign Password

KERBPASS Keyword—Foreign Password

Valid on z/OS.

Use the KERBPASS keyword as a password which must be supplied by a foreign system when the network authentication service connection is initiated.

Each system (A and B) must define itself as a local realm with a KERBPASS (X and Y):

In addition, to establish a connection, each system must define the corresponding foreign realm with passwords which match their local definition. This assures authentication at the REALM level.

This keyword has the following format:

TSS ADD(SDT) REALM(KERBDFLT|foreign_realm)
             REALMNAME(realmname)
             ENCRYPT('[DES|NODES]
                     [DES3|NODES3]
                     [DESD|NODESD]
                     [AES128|NOAES128]
                     [AES256|NOAES256]')
             KERBPASS(password)

This keyword is used with:

• The commands ADDTO and REPLACE
• The SDT Record exclusively
• MISC3(SDT) authority to ADDTO or REMOVE records or REPLACE fields in the SDT
• MISC8(LISTSDT) authority to list realms in the SDT

Example: KERBPASS keyword

This example creates the local realm associated with the URL HYPOTHETICAL.CA.COM enabling all encryption types and a password of "THET1CL".

TSS ADD(SDT) REALM(KERBDFLT)
             REALMNAME(HYPOTHETICAL.CA.COM)
             ENCRYPT('DES DESD') (THET1CAL)

At a communicating node with URL HONEYPOT.CLIENT1.COM, this same node could be described as a foreign REALM at HYPOTHETICAL.CA.COM with the identical KERBPASS:

TSS ADD(SDT) REALM(HYPOTHET)
             REALMNAME('/.../HONEYPOT.CLIENT1.COM/krbtgt/HYPOTHETICAL.CA.COM')
             ENCRYPT('DES DESD')
             KERBPASS(THET1CAL)