I don't know of any native z/OS facility, but CA-TPX provides this capability. 
That would be an expensive solution for this problem, but of course you would 
get a lot of additional function as well.

Maybe another more basic (=cheaper) session manager would be acceptable. I know 
only this one. 

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
[email protected]


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Andrew Metcalfe
Sent: Friday, April 14, 2017 10:05 AM
To: [email protected]
Subject: (External):IEFUTL Woes

For reasons best left unspoken, I need to cause a TSO user’s screen to “lock” 
after the SMF TWT time has expired. The user then has to re-authenticate by 
supplying their RACF password. If they haven’t unlocked their screen after 
another TWT interval I need the user to be terminated S522. 

The key driver is obviously the IEFUTL exit. However, I can’t “pause” the 
process and have IEFUTL wait for the response, because I also want to grant an 
extension to the already consumed wait time and then have the user cancelled at 
the end of the extension period. This means running IEFUTL to conclusion in 
order to grant the extension.
I have tried various approaches without complete success:

-       Attaching IKJEFT01 as a subtask of the program named in the logon 
procedure and waiting on ECB posted by IEFUTL. Still pursuing this, just in a 
mess with the protect key of the ECB which I can overcome.
-       Multiple IEFUTL exits – 1st one to set the extension and 2nd one to 
lock the screen. My testing implies that all the exits at SYSTSO.IEFUTL must 
complete before the extension is honoured.

Now considering the use of an SRB scheduled out of IEFUTL so that the IEFUTL 
path completes and grants the extension. However it’s been a while since I 
messed with SRB and I’m not sure I have the correct environment. More reading 
required, but the SRB is another unit of work and therefore won’t have access 
to SYSTSPRT and probably can’t issue TPUT/TGET anyway – I’ve not checked.

I’ve read all I can find in the archives but nothing helps.

Any pointers gratefully received.

Thanks

Andrew


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to