z/OS Security Server RACF Callable Services
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Usage notes

z/OS Security Server RACF Callable Services
SA23-2293-00

  1. If the caller is in problem state, the RACF_userid specified must be the same RACF® user as found in either the task level ACEE or the address space level ACEE.
  2. If the caller is in supervisor state, the task and address space ACEEs are not checked. Therefore, an authorized caller may extract or replace DCE segment fields for any user who has a DCE segment.
  3. The retrieve function returns fields that have been previously populated. Associated with the returned fields is a length indicator. The length indicator is set to zero if a field does not exist.
  4. It is the responsibility of the caller to obtain and free the output area. If the fields to be retrieved from RACF are larger than the output area, RACF fails the request and returns the actual length required in the output_area_length parameter.
  5. The field names supplied by the caller may be:
    • UUID
    • DCENAME
    • HOMECELL
    • HOMEUUID
    • DCEFLAGS
    The field names must be supplied as 8-character fields, left justified, and padded with blanks. They must be specified in uppercase.
  6. The DCEFLAGS field is a 1-byte field with the following meaning:
    • Value of X'00' means that z/OS DCE does not attempt to sign on this user to z/OS DCE automatically
    • Value of X'01' means that z/OS DCE attempts to automatically sign on this user to z/OS DCE

Parameter Usage:

Parameter GET_INFO Direction PUT_INFO Direction
SAF_return_code Output Output
RACF_return_code Output Output
RACF_reason_code Output Output
Function_code Input Input
RACF_userid Input Input
Field_list Input Input
Output_area Output n/a
Output_area_length Output n/a

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014