Security Considerations › Partner Security › SAF Security Call—Partner Security

SAF Security Call—Partner Security

If LUSECURE=YES is coded in the Default Options Table, CA XCOM Data Transport makes a standard SAF call to the security package (CA ACF2, IBM RACF, or CA Top Secret) to determine whether the user is trying to initiate a transfer has READ authority to the class resource named in the security call. The security class queried is determined by the value of the FACILITY configuration parameter. The default resource class name used by CA XCOM Data Transport is FACILITY.

The format of the security call is as follows:

XCOM.applsec.{LU|IP}.destname.{SEND|RECEIVE}.{L|R}

The components of the security call are explained in the following table:

XCOM

The literal XCOM must be specified as the first element of every security call.

applsec

Specifies the value of the APPLSEC parameter in the Default Options Table, unless it is NONE, in which case the expression XCOM will appear in this position. This slot in the security call identifies the CA XCOM Data Transport server.

LU

The literal LU indicates that the partner is an SNA partner.

IP

The literal IP indicates that the partner is a TCP/IP partner.

destname

Specifies the destination name that is to participate in the transfer. It may be an SNA LU name, TCP/IP name or TCP/IP address. For file security, the Default Options Table parameter TCPLUSEC determines the format used to pass the TCP/IP address to the security system. For partner security using TCP/IP, the actual TCP/IP name or address as provided in the destination member or SYSIN01 is used as the destname for the security resource.

SEND

The literal SEND indicates the direction of the transfer from the server's point of view.

RECEIVE

The literal RECEIVE indicates the direction of the transfer from the server's point of view.

L

The literal L indicates a locally initiated transfer.

R

The literal R indicates a remotely initiated transfer.