In order to validate a logon or establish a security environment for an ACID, the following AIPL fields are required:
Contains AI$INIT
Contains the name of the ACID to be logged on
Contains the new password to be used for this user
Contains the ACID's CA Top Secret password
Contains terminal address to be used as part of INIT verification
The following flag setting of AIFLAG1 can also be used:
Logon is performed bypassing password validation (that is, the AIPW field is not validated)
The calling program has re-verified the new password
Note: If the control option is set to require a new password be re-verified, the calling program must do that verification and set the AIF$PWRV flag to inform CA Top Secret that the verification has been done.
In order to issue an AI$INIT, the issuer of the diagnose must be authorized to diagnose X'A0' with the VMPRIV attribute.
If the issuer of the diagnose has a MASTFAC (master facility) associated with it, all validation (facility, resource, etc.) is done using that facility restriction. If the user has no associated MASTFAC, the validation requests are done using FAC(VM).
|
Copyright © 2008 CA.
All rights reserved.
|
|