z/OS Security › TCP/IP Security › IMS › IMS Connect › End-User Validation

End-User Validation

IMS Connect allows security for individual client messages by checking a RACF flag. If you turn the RACF flag ON, IMS Connect uses the System Authorization Facility (SAF) interface to invoke RACF by issuing a RACROUTE REQUEST=VERIFY call to verify a user ID and password. This is a global option in that IMS Connect either verifies for all users or does not verify for any users. There are two ways to activate the RACF flag, as follows:

• Set the RACF flag in the configuration file, HWSCFG00, by setting the flag to Y (RACF=Y).
• Issue the HWS command SETRACF to set the RACF flag.

The security information pertaining to end users must be provided for IMS Connect to invoke RACF to verify the user IDs associated with end users' messages. Security information is passed from TCP/IP clients in the IMS Request Message (IRM) or can be provided by the user message exit portion of the IRM that has the security-related information.