z/OS Security › TCP/IP Security Features Used by CA Gen › CICS

CICS

CA Gen offers only one TCP/IP Direct Connect for CICS product, the CICS Sockets Server implementation. The Direct Connect for the CICS implementation that is offered in earlier releases, TILSTNR and TICONMGR, has been stabilized and is not included with CA Gen.

In the CICS Sockets Servers implementation, the CA Gen Listener program TISRVLIS calls user exit TIRSLEXT. TIRSLEXT receives the ASCII and ECBDIC versions of trancode and code page, ASCII User ID and one of the following:

• The EBCDIC password when standard security is used
• A flag indicating that enhanced security is used (the password is only available in the server TIRSECV exit)

In TIRSLEXT the ASCII user Id is translated to EBCDIC and can be modified, including blanked out, if necessary. If the ESM requires the security data to be in uppercase the conversion of the security data must be done in this exit.

The TIRSLEXT exit can be modified to invoke the ESM so that the security data can be verified and the request that is accepted or rejected. When accepted the server is started using an EXEC CICS START TRANSID with the USERID operand, with the exception that if the user Id is blanked out the server is started without specifying the USERID operand.

If the START is successful but the Attach fails, or the server is unable to execute, the TAKESOCKET Socket API fails and closes the server socket connection.