Question & Answer
Question
We are running DB2® Content Manager OnDemand for z/OS™ . We implemented the ARS.PTGN exit to create RACF passtickets when the -u and -p parameters are omitted. This does not seem to work when we run ARSLOAD. If we omit the -u and -p parameters, we receive: arsload: Using /tmp for temporary files arsload: Processing file >/u/arsload/html< Userid or password is invalid Userid or password is invalid arsload: Unable to log load information arsload: Processing has stopped. The remaining files will not be processed. How do we ensure ARSLOAD will use the ARS.PTGN exit when the -u and -p parameters are not present and the /usr/lpp/ars/config/arsload.cfg file doesn't exist?
Cause
Improper installation.
Answer
There are a number of things to consider when setting up the ARS.PTGN MVS dynamic exit point for OnDemand batch access unified login. The first is whether the arsload.cfg file is present in the /usr/lpp/ars/config directory. For unified login with ARS.PTGN, you do not use this file and the remainder of this technote assumes it does not exist. When the -u parameter is omitted for an arsload submission, OnDemand attempts to use the ARS.PTGN exit point. If the exit point is found, OnDemand attempts to generate a passticket and perform a logon with the ID returned from a getpwuid() call. Because OnDemand calls getpwuid() to acquire the user name, it is important that the arsload owner has a unique OMVS uid defined so it is predictable which user name will be returned from getpwuid().
OnDemand calls RACF with this ID to generate the passticket and then attempts to logon with this user name and the generated passticket as the password.
Following is a checklist for implementation:
1. Verify that the PassTicket to RACF for the associated application(task) id is defined.
2. Go to RACF Panels (typically ISPF option 13.12)
choose '2' (GENERAL RESOURCE PROFILES) --> choose 'D' (DISPLAY Display profile contents)
3. On the 'RACF - GENERAL RESOURCE SERVICES - DISPLAY' screen enter the following:
'PTKTDATA' for the CLASS, and '*' for PROFILE CLASS ===> PTKTDATA PROFILE ===> *
4. Press enter --> you should now see the RACF - DISPLAY GENERAL RESOURCE PROFILE screen
5. Press hit enter again. Note that the arssockd application should be defined to the PTKTDATA class.
6. If exit ARSPTGN is not active, from the MVS system console issue:
SETPROG EXIT,ADD,EXITNAME=ARS.PTGN,MOD=ARSPTGN,DSNAME=
ARS.DATASET.HOLDING.THE.EXIT
7. Ensure that /etc/ars/ does not contain an arsload.cfg
8. If ARSUSECZ does not exist, from the MVS system console issue:
SETPROG EXIT,ADD,EXITNAME=ARS.SECURITY,MOD=ARSUSECZ,DSNAME=
ARS.DATASET.HOLDING.THE.EXIT
9. Recycle the ARSSOCKD started task.
Related Information
Was this topic helpful?
Document Information
Modified date:
18 June 2019
UID
swg21192853