Janet,

I work off the TSB

On Thursday, October 13, 2016, J R <jayare...@hotmail.com> wrote:

> My apologies, yes, I meant ASXBSENV.
> Re. RACROUTE, this is a higher layer (SAF - System Authorization Facility)
> to request auth functions without concern over which specific security
> server is in use, ie. RACF, ACF2 or TSS.  Before SAF, non-RACF alternatives
> would need to hijack SVCs 130-133.
>
> If you are not sure which security server is in use, it's always safer to
> use RACROUTE.
>
> Sent from my iPhone
>
>
>
> ________________________________
> From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU
> <javascript:;>> on behalf of Janet Graff <
> 0000004dc9e91b6d-dmarc-requ...@listserv.ua.edu <javascript:;>>
> Sent: Thursday, October 13, 2016 1:14 AM
> To: IBM-MAIN@LISTSERV.UA.EDU <javascript:;>
> Subject: Re: Changing the primary AUTHID using RACROUTE
>
> >Put the address of the new ACEE in ASCBSENV and/or TCBSENV as appropriate?
>
> >J R
>
> I think it's ASXBSENV.
>
> For my test application TCBSENV is 0.
>
> I get a S0C4 when I do attempt to replace ASXBSENV despite being
> authorized and in supervisor mode.  It feels like there is a RACROUTE macro
> or equivalent that says "start using this ACEE" which will put the value in
> ASXBSENV and probably update ASXBUSER?
>
> I see references to the RACINIT macro which has similar parameters but it
> appears to be a parallel function to RACROUTE ENVIR=CREATE and not a
> sequencing thing, that is you aren't supposed to do RACROUTE ENVIR=CREATE
> and then RACINIT ENVIR=CREATE.
>
> For what I'm trying to do, that is create a new secondary ACEE and run
> under this new ACEE's authority, would the RACINIT macro be more
> appropriate?
>
> Janet
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu <javascript:;> with the message:
> INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu <javascript:;> with the message:
> INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to