This function is useful for a virtual machine through which batch jobs can be routed to a guest or external operating system for execution on behalf of other users. Care should be taken to adequately protect this machine and to destroy any record of these passwords once used.
In order to extract a password for a given ACID, the issuer of the diagnose must have been permitted the use of diagnose X'00A0' with ACTION(VMPRIV), and either the use of the other ACID or have the NOSUBCHK attribute. Under no circumstances is the ACID allowed to extract its own password. The following fields in the AIPL must be supplied:
Contains AI$PWX.
Contains the name of the ACID from which to extract the password.
The return codes contained in AIRC are as follows:
Extract successful.
The ACID specified in AIACID has no password.
Error extracting password - See AIDRC.
Caller does not have authority to extract the ACID's password.
Syntax error in AIPL..
If successful, the plaintext password is returned in the AIPW field (padded to the right with blanks).
|
Copyright © 2008 CA.
All rights reserved.
|
|