Implementing Security with CA Top Secret › External Communicators with CA Top Secret › U7SVC and External Security › U7SVC with an Input Stream

U7SVC with an Input Stream

A security EXTRACT is done to determine the USERID that invoked U7SVC. This USERID is later used to generate a full logon statement or optionally perform a submit check. The input stream is then read to determine whether a logon statement was supplied. If no logon statement was supplied or if a logon statement was supplied without an OPID, one is generated for the execution. The logon statement resembles the following:

/LOGON extid                                    *GENERATED LOGON*

The extid is the EXTRACTed ID of the job. This logon statement is passed to CA WA CA 7 Edition indicating that no password is needed with this particular logon attempt.

If a logon statement with an OPID is found and the OPID is the same as the EXTRACTed ID, the logon statement is passed to CA WA CA 7 Edition indicating that no password is needed with this particular logon attempt.

If the OPID is not the same as the EXTRACTed ID, other checks are done. A check is made to see whether the value of BSUBCHK for the instance is Y. If it is, a submit check is performed. The check is done to see whether the EXTRACTed ID has the authority to submit on behalf of the OPID in the logon statement. If the check is okay, the logon statement is passed to CA WA CA 7 Edition indicating that no password is needed with this particular logon attempt.

If the value BSUBCHK is not Y, no submit checks are done. The logon statement is passed as it is coded with no special indication to CA WA CA 7 Edition. If CA WA CA 7 Edition has EXTERNAL=LOGON coded in the initialization file, a logon check is performed trying to supply a password. If the password was entered on the logon statement, the external security package validates it. If no password was coded, the logon fails due to a missing password.

In general, a password is needed only two times:

• The user codes the user exit SASSXXLX to require a password.
• The value of BSUBCHK is not Y and the OPID is different from the EXTRACTed ID.

Note: Values of SVDSNCHK and BSUBCHK are set using CAIRIM. This method is discussed in the chapter "Execution" in the Systems Programming Guide. There you can also find information about CAL2ENVR, a utility that reports current options used by each instance of CA WA CA 7 Edition supported on the LPAR. CAL2ENVR can be used to determine the current settings of keywords such as SVDSNCHK and BSUBCHK.