CA WA CA 7 Edition associates two different types of user IDs with agent jobs.
The first type is the agent user ID. An agent user ID is sent to the agent for authorization on the agent platform. Most agent job types require one agent user ID, although some job types require more, and some do not require any. The agent user IDs come from either the job definition in CA WA CA 7 Edition or from the CLANG statements in the PARMLIB data. Passwords associated with user IDs, agents, and job types are maintained through the AGPSWD command.
The second type of user ID associated with an agent job is the mainframe user ID (MFUser). Every agent job that CA WA CA 7 Edition submitts requires an MFUser field. When internal security is used or when external security is used but agent job submissions are not being validated, the CA7 global user ID is used as the MFUser field. When external security is used and agent job submissions are being validated, CA WA CA 7 Edition performs a hierarchical search to determine the MFUser field. The AGUSER keyword on the SECURITY statement in the initialization file determines the search path. For commands, MFUser is the currently signed-on user who is issuing the command. '
The following are the choices:
Indicates to select the job OWNER ID as the MFUser field.
Indicates the requester's ID is a candidate for the MFUser field. The requester ID can be the user ID of a user issuing a DEMAND command to request a job. The requester ID can also be the user ID selected for a job (requester) that then triggers additional jobs. The triggered jobs inherit the user ID. For data set triggers, jobs that create or "post" a data set to CA WA CA 7 Edition have their associated user ID propagated to any later triggered jobs. For the U7SVC and SASSBCLP facilities, the user ID is extracted from the current environment from which the user issues the data set creation or post request.
Indicates that the user ID of any user editing queue PARMLIB data for a job is a candidate for the MFUser field. This value would be the user ID of the last person to edit queue PARMLIB data for a job.
Indicates to select the user ID assigned to CA WA CA 7 Edition for the MFUser field.
If validating agent job submission, as determined by the presence of EXTERNAL=(…AGENT) in the SECURITY initialization statement, authorizations are performed to help ensure that MFUser is authorized to submit agent jobs to the specific agent name using the agent user ID. Authorizations are also performed for commands directed to an agent. The AGLCASS keyword on the SECURITY statement determines the resource class used for the authorizations.
Note: For more information, see the SECURITY statement in this guide and the AGPSWD command in the Database Maintenance Guide.
|
Copyright © 2013 CA Technologies.
All rights reserved.
|
|