Security › External Security › Initialization Parameters

Initialization Parameters

Three initialization parameters affect the operation of external security.

• EXTSEC=

  Set EXTSEC=NO so that external security calls are not made.

  You can also code EXTSEC=YES and EXTSEC=UNIQUE to cause CA Deliver to make external security calls. The difference is in the resource names that are used. For EXTSEC=YES or EXTSEC=UNIQUE to be in effect, the started task must have been started at least once after the last IPL.

  All CA Deliver resource names are prefixed with either "RMO." or "RMO#." If you specify EXTSEC=YES, the "RMO." prefix is used. Use this option when all (or most) of your CA Deliver regions use the same security rules. For more information about resource names, see the section Resources and Authorization that follows.

  User ID Determination

  CA Deliver uses exits to determine the user ID of the user accessing the CA Deliver database. These exits can also perform initial logon functions for users that are logging on using the VTAM and CICS XMS interfaces.

  Note: For more information about these exits, see the RMOUSxUX - User ID Determination Exits in the chapter "User Exits" in the Programming Guide.

• EXTTRAN=

  If you use external security (RACF, CA ACF2 Security, CA Top Secret Security) and the report id contains characters from the extended special character set, this parameter must be specified as EXTTRAN=YES to have extended special characters automatically translated to ‘_’ underscores, before the RACROUTE security call.

  Note: For more information about this parameter, click Character Translation in Resources Names.

• SYSID=

  If you need separate rules for one or more regions, code EXTSEC=UNIQUE in the initialization parameters. External security calls then use the "RMO#." prefix. The #-sign is replaced with the region's SYSID= value.

Note: For more information about initialization parameters, see the chapter "Initialization Parameters."