IBM Support

Updates to IMS ETO Support V3.2 User's Guide

Product Documentation


Abstract

Updates that apply to IMS ETO Suport V3.2 User's Guide (SC19-3982-02).

Content

The most recent updates appear at the top of the list.


Update 3

Date of change: Nov 2018

Change description: Documentation changes by APAR PH00106. This APAR modifies the program to load and use a user-supplied DFSCTRN1 instead of DFSCTRN0.

Topics: Changes apply to multiple topics.

Topic:  IMS ETO Support overview > IMS ETO Support overview > Managing the IMS ETO environment > IMS ETO Support user exits

This topic has been updated as follows:

IMS ETO Support's initialization exit attempts to load the following user exits at IMS startup:

  • DFSINTX1 (Initialization user exit)
  • DFSGMSG1 (Greetings Messages user exit)
  • DFSCCMD1 (Command Authorization user exit)
  • DFSINSX1 (Output Creation user exit)
  • DFSSGFX1 (Signoff user exit)
  • DFSSGNX1 (Signon user exit)
  • DFSSGNX2 (Signon user exit - always called)
  • DFSLGNX1 (Logon user exit)
  • DFSLGNX2 (Logon user exit - always called, unless other logon user exits - DFSLGNX0 or DFSLGNX1 - reject the logon)
  • DFSINSX2 (Output creation exit - called when exit DFSINSX0 ends with a return code zero):
  • DFSCTRN1 (Transaction Authorization user exit)

Topic: Configuring IMS ETO Support > Choosing IMS ETO Support options > Security options > IMS ETO Support Enhanced Transaction Verification

This following topic has been updated as follows:

The ETV methods are optional and can be used in addition to, or in place of, IMS RACF or IMS SMU security. Only one form of ETV can be used at a time.

Both forms of ETV checking (RACF or IMS ETO Support Matrix) use the IMS Transaction Authorization Exit (DFSCTRN0) to perform the validation.

However, ETV cannot be used If there is an existing user version of DFSCTRN0. To use a user version of DFSCTRN0 along with ETV processing, you must rename the user version of DFSCTRN0 to DFSCTRN1.

For example:

  • At IMS startup, IMS ETO Support sets an intercept for its version of the DFSCTRN0 exit, and saves the address of any user DFSCTRN1 exit.
  • If the IMS ETO Support version of DFSCTRN0 denies access to the transaction, DFSCTRN1 is not invoked.
  • If IMS ETO Support determines access is allowed, DFSCTRN1 is called and all parameter input is the same as if IMS ETO Support was never called.

...

Authorization is performed at initial transaction arrival and for IMS CHNG calls:

  • If multiple LTERMs are assigned to a NODE/USER, IMS ETO Support will perform authorization at initial transaction arrival using the first LTERM that is not either STOPPED or LOCKED.
  • ETV does not process transactions from APPC or OTMA devices.
  • If IMS rejects transaction authorization, the IMS ETO Support DFSCTRN0 exit does not get control.
  • If the IMS ETO Support DFSCTRN0 exit rejects transaction authorization, DFSCTRN1 does not get control.



Update 2
Date of change: May 2018
Change description: Documentation changes by APAR PI94090. This APAR enables users to restrict LU 6.1 sessions to be connected by specifying a list of allowable LU names.
Topics: Changes apply to multiple topics.

  • Topic: Configuring IMS ETO Support > Choosing IMS ETO Support options > Logon and signon options > Considerations for LU 6.1 (ISC) sessions

    A new section, "LU 6.1 (ISC) LUNAME entries," has been added before the "LU 6.1 (ISC) user ID entries" section, as follows:


    LU 6.1 (ISC) LUNAME entries
    IMS ETO Support provides an option that ensures that remote systems can use only desired LUNAMEs for signon. This option is called LU DEFINITION REQUIRED. If this option is active, an LU 6.1 (ISC) LUNAME record must be defined in the options data set for every LUNAME that is allowed for LU 6.1 (ISC) sessions.
  • Topic: Using IMS ETO Support > Customizing options > Setting device -specific options > Device options for LU 6.1 (ISC)

    A new option, LU DEFINITION REQUIRED, has been added to the Device Options LU 6.1 (ISC) panel.

    Figure 1. Device Options LU 6.1 (ISC) panel




    ...

  • LU 6.1 (ISC) options reference

    LOGON PROCESS
    ...

    USER REC REQUIRED FOR SIGNON
    • Use this option if you want to ensure only desired user IDs are used to start LU 6.1 (ISC) sessions. If this option is set to Y, any USER specified on the /OPNDST command must have an LU 6.1 (ISC) user ID table entry.


    LU DEFINITION REQUIRED
    • Use this option if you want to ensure that only desired LUNAMEs are allowed to start LU 6.1 (ISC) sessions. If this option is set to Y, every node that is specified on the /OPNDST command must have an associated LU 6.1 (ISC) LUNAME table entry.
  • Topic: Using IMS ETO Support > Customizing options > Setting LUNAME-specific options

    A new device type, LU6.1 (ISC), has been added to the LUNAME Specific Options panel.

    Figure 1. LUNAME Specific Options panel


  • Topic: Using IMS ETO Support > Customizing options > Setting LUNAME-specific options

    The following new section has been added after "Setting LUNAME options for the SLUP/3600/FINANCE device."


    Setting LUNAME options for the LU 6.1 device
    This topic describes setting LUNAME options for LU 6.1 devices.

    Viewing the LU 6.1 device member list
      • The LU 6.1 Member List panel is displayed if you choose option 4 on the LUNAME Specific Options panel.

        Figure 1. LU61 (ISC) Member List panel


        This panel displays a list of the LU 6.1 members, if any.
        If the LU DEFINITION REQUIRED option is active, only the listed LUNAMEs are allowed to start LU 6.1 (ISC) sessions.
        To add an LUNAME, type A on the command line and press Enter.
        To update a listed LUNAME entry, tab to the desired name and type S or E next to the name; then press Enter.

        Note:
        • If the name you want does not appear on the list, you can press PF8 or type F on the command line and press Enter to view the next screen of member names.
          Or, you can type the first few characters or the entire name on the START command line to scroll through the list.
          You can also press PF7 or type B on the command line and press Enter to scroll backwards.

    Setting options for the LU 6.1 device
      • The LUNAME Options for LU 6.1 (ISC) panel is displayed after you select the appropriate option on the LU61 (ISC) Member List panel.

        Figure 2. LUNAME Options for LU 6.1 (ISC) panel



      •  
      • LUNAME (command line)
        • Enter the LUNAME when adding an LU member.
          You can use wildcards if you do not want to use specific LUNAMEs. Wildcards include:
          • Percent sign (%) - represents a one-to-one relationship with character positions in your LUNAMEs.

          • For example, L1%%% captures those members beginning with L1 followed by any three characters.
          • Question mark (?) - represents a one-to-one relationship with numeric positions in your LUNAMEs.

          • For example, L1??? captures those members beginning with L1 followed by three numeric digits.
          • Asterisk (*) - represents any characters (from zero to many) in the LUNAME.

          • For example, L1* captures all members starting with L1.
            Note:
            • An asterisk must be the last character in the name.

        LOGON DESCRIPTOR
        • Specify the 1- to 8-character alphanumeric logon descriptor name. The first character must be alphabetic or national (@#$). If IZTFAIL is specified as the logon descriptor, IMS ETO Support will reject the logon attempt.
  • Topic: Using IMS ETO Support >Test facilities: Translation table lookup > LU 6.1 translation lookup

    A new column named LUNAME has been added under the ENTRY TYPE field in the LU 6.1 Translation Lookup panel.

    Figure 1. LU 6.1 Translation Lookup panel

  • Topic: Batch utility > Updating the options data set (batch update utility) > Control statement syntax for batch update utility

    A new function parameter, Z7, has been added to the control statement syntax for batch update utility functions:

    Figure 1. Control statement syntax for batch update utility functions
    • ...
      Z1 (default SLU1 console device)
      Z3 (default for SLUP/3600/FINANCE device)
      Z6 (default for LU 6.1 devices)
      Z7 (for LU 6.1 LUName)
      ZM (DFS3649 error messages)
      ...
  • Topic: Batch utility > Updating the options data set (batch update utility) > Control statement syntax for batch update utility

    The following new section has been added after "Z3 - Default device control statements for SLUP/3600/FINANCE."


    Z6 - Default device control statements for LU 6.1
    This reference topic describes how to add, modify, or delete the default device record for LU 6.1 devices.

    Adding the default device record for LU 6.1 devices
    The control statement format for adding the default device record for LU 6.1 devices is:

    Z6 <keyword-parameters>

    Example:
    The following control statement changes the default ASOT value for LU 6.1 devices:

    Z6 ASOT=90

    The following keyword parameters can be specified:

    ASOT=
      • Specifies the automatic signoff time.
        The numeric value must be 0, or within the range of 10-1440.

    ALOT=
      • Specifies the automatic logoff time.
        The numeric value must be 0, or within the range of 10-1440.

    LOGON=
      • Specifies one of these options:
          • LOGON=ETOS (to use the IMS ETO Support process)
          • LOGON=DFSLGNX1 (to use the DFSLGNX1 user exit)
          • LOGON=AUTO (to use the IMS ETO Support auto signon feature)

    LUDEFREQ=
      • Specifies whether a LU name record must be defined for a logon to be successful.

        YES
        • The IMS ETO Support LU name table is searched at logon time.
          The logon fails if there is no matching entry in the table.

        NO
        • Logon continues even if there is no matching entry in the LU name table.

    MSGDEL=
      • Specifies the messages that are discarded by IMS for the specified terminal. The options are:
          • MSGDEL=SYSINFO
          • MSGDEL=NOTERM
          • MSGDEL=NONIOPCB

    RESP=
      • Specifies the terminal response option. Valid specifications are:
          • RESP=NORESP
          • RESP=FORCRESP
          • RESP=TRANRESP

    SECURITY=
      • Specifies the name of the security group assigned to these devices.
        This option is used only if the IMS ETO Support Security Table Lookup option is selected.

    SGNUSREC=
      • Specifies whether a user ID record must be defined for a signon to be successful.

        YES
        • The IMS ETO Support user ID table is searched at signon time.
          The signon fails if there is no matching entry in the table.
      • NO
        • Signon continues even if there is no matching entry in the user ID table.

  • Deleting a default device record
    The control statement format for deleting the default device record for LU 6.1 devices is:

    Z6 DELETE
  • Topic: Batch utility > Updating the options data set (batch update utility) > Control statement syntax for batch update utility
    The following new section follows "Z6 - Default device control statements for LU 6.1."

    Z7 - LU 6.1 LUName record control statements
    This reference topic describes how to add, modify, or delete an LU 6.1 LUName record.

    Adding an LU 6.1 LUName record
    The control statement format for adding an LU 6.1 LUName record is:

    Z7 <node> <keyword-parameters>

    Examples:

    Z7 IMS0 LDESC=DFSLU61

    Z7 IMS0

    <node>
      • Specifies the LU 6.1 type node name. The node name must be 1-8 uppercase alphanumeric characters.
        Character 1 must be alphabetic or national (@#$).
        You can use wildcards if you do not want to use specific LUNAMEs. Wildcards include:
          • Percent sign (%) - represents a one-to-one relationship with character positions in your LUNAMEs.

          • For example, L1%%% captures those members beginning with L1 followed by any three characters.
          • Question mark (?) - represents a one-to-one relationship with numeric positions in your LUNAMEs.

          • For example, L1??? captures those members beginning with L1 followed by three numeric digits.
          • Asterisk (*) - represents any characters (from zero to many) in the LUNAME.

          • For example, L1* captures all members starting with L1.
            Note:
            An asterisk must be the last character in the name.

    When adding an LU 6.1 LUName record, you can specify the following keyword parameter in addition to the function and node parameters:

    LDESC=
      • Specifies the logon descriptor. The descriptor must be 1-8 alphanumeric characters. Character 1 must be alphabetic or national (@#$).
        If IZTFAIL is specified as the logon descriptor, IMS ETO Support will reject the logon attempt.


    Deleting a LU 6.1 LUName record
    The control statement format for deleting an LU 6.1 LUName record is:

    Z7 <node> DELETE

    Example:
    The following control statement deletes an LU 6.1 LUName record:

    Z7 IMS0 DELETE

  • Topic: Batch utility > Listing the options data set (batch list utility)

    The description of LU61 PARM statement has been updated as follows:

    PARM statement syntax and entry values
    ...

    LU61
    Use this value to create batch update utility control cards for LU 6.1 (ISC) device, LUNAME, and user ID table entries.
  • Topic: Troubleshooting > Runtime messages (IZT)

    The following message has been added:


    IZT3122E INVALID VALUE SPECIFIED FOR "LU DEFINITION REQUIRED"

    Explanation: You have specified an invalid value for the "LU DEFINITION REQUIRED" field.

    System action: No processing is attempted.

    User response: Enter a valid option in the "LU DEFINITION REQUIRED" field, and try the operation again.

    Module: IZTDUPD0



Update 1
Date of change: May 2017

Change description: Documentation changes by APAR PI71728.
Topics: Chapter 6 - Customizing options
Setting LUNAME-specific options
Setting LUNAME options for the SLU2/3270 device
Setting options for the SLU2/3270 device
Addition of LOGON PROCESS option #5
5 – RACF USERID

Chapter 5. Choosing IMS ETO Support options
Logon and signon options
Logon process options
RACF USERID

Chap 10 ZN - LUNAME record control statements
LOGON=USRACF

RACF USERID
Use this option to perform an automatic RACF signon using the user ID
specified in option 4 USERID.
You must enter the TSO user ID value in the entry field for option 4 (USERID).
An online or batch refresh is required after the change is made to activate the
change dynamically.
Note: IMS ETO Support first matches the LUNAME at the signon with a
specific LUNAME in the "LUNAME OPTIONS for SLU2/3270" table before it
attempts to match any wild card.
Restriction: If users are enabled to signon to IMS multiple times (from
multiple terminals) with the same userid, it is best practice to use IMS ETO Support
logon and naming options that do not create naming collision errors. For example,
when using USERID or RACF USERID for the logon process, do not use IMS
DEFAULT as the LTERM/USER NAMING OPTION. Instead, use
NODE=LTERM=USER as the LTERM/USER NAMING OPTION.

ZN - LUNAME record control statements
LOGON=USRACF (to use auto signon and RACF with a user ID
specified with the USERID= option)
An online or batch refresh is required after the change is made to
activate the change dynamically.
Example:
ZN SI3TCP30 LOGON=USRACF USERID=userid
Note: IMS ETO Support first matches the LUNAME at the signon with a
specific LUNAME in the "LUNAME OPTIONS for SLU2/3270" table
before it attempts to match any wild card.


Change description: Documentation changes.
Topics: Update to Chapter 6 - Customizing options
(updated panel) Miscellaneous Menu
(new topic) Specifying return codes for transactions using BSEX user exit
(new topic) Specifying return codes for PSBs using BSEX user exit

Miscellaneous Menu


Specifying return codes for transactions using BSEX user exit
Use this panel to specify return code values for IMS transactions using the Build
Security Environment user exit (BSEX).

You can use the Build Security Environment user exit (BSEX) to tell IMS whether
to build the RACF or equivalent security environment in an IMS dependent region
for an application that has not received its input message from OTMA or from an
LU 6.2 device.

You can also use this user exit to request that IMS bypass some part of the security
processing in the dependent region when one of the following events occurs for a
message that did not originate from an OTMA or LU6.2 device:
- CHNG call.
- AUTH call.
- Deferred conversational program switch on the local system (when the system
where the inputting terminal is active).

Security authorization for the deferred conversational program switch occurs
only on the local system.

The following panel is displayed when you choose option 6 from the
Miscellaneous Menu.


This panel displays return codes for IMS transactions, if any exist.

To add a new transaction and return code specification, type A on the command
line and press Enter.

To update a listed entry, tab to the desired entry, type S or E next to the name, and
press Enter.

For valid return code values, refer to the Transaction Manager exit routines
information (Build Security Environment user exit (BSEX)) in the IMS Reference
Information section of the IMS user documentation.

Note: If the name you want does not appear in the list, you can press PF8 or type
F on the command line and press Enter to view the next screen of entry names.
You can also type the first few characters or the entire name on the START
command line to scroll through the list.

Specifying return codes for PSBs using BSEX user exit
Use this panel to specify return code values for PSBs using the Build Security
Environment user exit (BSEX).

You can use the Build Security Environment user exit (BSEX) to tell IMS whether
to build the RACF or equivalent security environment in an IMS dependent region
for an application that has not received its input message from OTMA or from an
LU 6.2 device.

You can also use this user exit to request that IMS bypass some part of the security
processing in the dependent region when one of the following events occurs for a
message that did not originate from an OTMA or LU6.2 device:
- CHNG call.
- AUTH call.
- Deferred conversational program switch on the local system (when the system
where the inputting terminal is active).
Security authorization for the deferred conversational program switch occurs
only on the local system.

The following panel is displayed when you choose option 7 from the
Miscellaneous Menu.


This panel displays return codes for PSBs, if any exist.

To add a new PSB and return code specification, type A on the command line and
press Enter.

To update a listed entry, tab to the desired entry, type S or E next to the name, and
press Enter.

For valid return code values, refer to the Transaction Manager exit routines
information (Build Security Environment user exit (BSEX)) in the IMS Reference
Information section of the IMS user documentation.

Note: If the name you want does not appear in the list, you can press PF8 or type
F on the command line and press Enter to view the next screen of entry names.
You can also type the first few characters or the entire name on the START
command line to scroll through the list.


Change description: Documentation changes from PMR50702
Topics: Options obsolete as of IMS V13
Chapter 9. Reloading IMS exits

Options obsolete as of IMS V13
Options B - DFSYPRX0 and D - DFSNDMX0 are obsolete as of IMS version 13.
If you are using IMS version 13, you can load the DFSYPRX0 and DFSNDMX0
user exits by specifying them in the USER_EXITS section of the IMS DFSDFxxx
member. This member belongs to the IMS PROCLIB data set.
The exit type to be specified is OTMAYPRX (OTMA Destination Resolution user
exit).
The name of the exit for IMS V13 is IZTYPRXD. The naming convention for the
exit uses the position of the name to designate IMS version compatibility (for
example, D for V13, E for V14).
The USER_EXITS section of the DFSDFxxx member specifies the user exits to be
called. The section must begin with the header <SECTION=USER_EXITS>. Refer to the
following IMS V13 documentation:
USER_EXITS section of the DFSDFxxx member

Publication Number

SC19-3982-02

Copyright Date

2003, 2016


Cross reference information
Product Component Platform Version Edition
IMS Tools IMS System Management z/OS 1.1.0

Document information

More support for: IMS Tools

Component: IMS ETO Support

Software version: 3.2.0

Operating system(s): z/OS

Reference #: 7049936

Modified date: 08 July 2019