Installation considerations for the SAF user mapping service

The SAF user mapping plug-in interface is used by C and C++ applications. Developers of applications that use or implement the plug-in interface should use the SIEAHADR(IRRSPIM) or /usr/include/irrspim.h header file to define the plug-in interface. The following table lists the shipped parts of the SAF user mapping plug-in implementation.

Table 1. SAF user mapping plug-in dlls, header files, and side deck
Data set member	HFS (hierarchical file system)	Description
SIEALNKE(IRRSPIM)		SAF user mapping interface module
SIEALNKE(IRRSPIME)		Default plug-in module
SIEAHDR(IRRSPIM)	/usr/include/irrspim.h	Header file that defines the SAF user mapping interface
SIEASID(IRRSPIM)	/usr/lib/irrspim.x	Definition side file for the SAF user mapping interface

The DLLs, IRRSPIM and IRRSPIME in SIEALNKE need to be program-controlled. See z/OS Security Server RACF Security Administrator's Guide for details on how to set up program control.

The default implementation of the plug-in interface uses the mappings that are stored in an EIM (Enterprise Identity Mapping) domain. The implementation requires access to eim.dll and ldap.dll, which are linked to /usr/lib. See z/OS Integrated Security Services EIM Guide and Reference for more information.