Defining profiles for LU-LU session pairs in RACF

Before activating sessions using session-level verification between LUs, define LU-LU session pair profiles in RACF®. These profiles are used by RACF to determine which type 6.2 LUs can establish sessions with each other. Application programs with VERIFY=OPTIONAL session keys do not have to be defined in the profiles. For more information, see Defining the degree of level 1 session-level verification.

LU-LU session pairs are defined to RACF by the RDEFINE command in the APPLU resource class. The format of the LU-LU session pair profiles differs depending on whether the application uses network-qualified names, as determined by the value of the NQNAMES specification on the ACB.

If NQNAMES=NO, then the LU-LU profiles must be defined to RACF using the following format: local_netid.local_lu.remote_lu
If NQNAMES=YES, then the LU-LU profiles must be defined to RACF using the following format: local_netid.local_lu.remote_netid.remote_lu

For more information about how to define LU-LU session pair profiles, refer to z/OS Security Server RACF Security Administrator's Guide.