Issue:
Running CA Common Services r14.1 with CAIRIM PTF RO69205 installed, the CAS9SAFC load module (located in cai.CAW0LINK) and related source (located in cai.CAW0SAMP) no longer contain the default resource classes in the translation table. As a result you may have some questions like:
Resolution:
In previous releases, after CCS was installed, if you were using CAISSF for IBM RACF and you needed to make changes to resource classes used by CA products, you were required to install a user modification (ie. CAS9MOD). This modification updated class tables that were embedded within CAS9RACL and CAS9SAFC.
Beginning with release 14.1 we introduce control statements in the CAIRIM initialization routine to replace that USERMOD. Now after the installation, you identify IBM RACF class table values in your existing user modification and code the necessary parameters using CAIRIM control statements. Default class table values are still defined so you only need to modify or add class tables if this is something you did previously. The new control statements are defined in a standard FB 80-byte file and are identified to the CAS9 procedure by a new CAIRACF DD statement. The syntax of this new control statement is as follows:
RACFCLASS CA-solution classname,translated classname, FASTAUTH=NO|YES,CICS=NO|YES
Refer to the CA Common Services r14.1 documentation for related information.
Here is an example of what the Resource Translation Table looked like in the CAS9SAFC source member previously delivered. Here you can see the various class table values. One common change that customers made was to change the resource check from a FASTAUTH check. A FASTAUTH check is made if the 4th column contains a x'80' as can be seen below for resource class CAADMIN and others.
RESTABLE DS 0F 00040800 DC C' DEFAULT',C' [email protected]',X'00',X'00',X'00',X'00' 00040900 * BELOW USED BY VIEWPOINT 00041000 DC C'ACAPPL ',C'[email protected] ',X'00',X'00',X'00',X'00' 00041100 DC C'ACCBPROC',C'[email protected]',X'00',X'00',X'00',X'00' 00041200 DC C'ACDIALOG',C'[email protected] ',X'00',X'00',X'00',X'00' 00041300 DC C'ACLIST ',C'[email protected] ',X'00',X'00',X'00',X'00' 00041400 DC C'ACMSG ',C'[email protected] ',X'00',X'00',X'00',X'00' 00041500 DC C'ACPANEL ',C'[email protected] ',X'00',X'00',X'00',X'00' 00041600 DC C'ACREPORT',C'[email protected]',X'00',X'00',X'00',X'00' 00041700 DC C'ACSQL ',C'[email protected] ',X'00',X'00',X'00',X'00' 00041800 * BELOW USED BY ???? 00041900 DC C'CAADMIN ',C'[email protected] ',X'00',X'80',X'00',X'00' 00042000 DC C'CACMD ',C'[email protected] ',X'00',X'80',X'00',X'00' TD46501 00042100 * DC C'CACMD ',C'[email protected] ',X'00',X'00',X'00',X'00' T62T649 00042200 * BELOW USED BY APCDDS 00042300 DC C'CADDS ',C'CA$DS ',X'00',X'80',X'00',X'00' 00042400 * BELOW USED BY ???? 00042500 DC C'CADOC ',C'[email protected] ',X'00',X'00',X'00',X'00' 00042600 * BELOW USED BY LIBRARIAN 00042700 DC C'CALIBMEM',C'[email protected]',X'00',X'00',X'00',X'00' 00042800 DC C'CACCFDSN',C'[email protected]',X'00',X'00',X'00',X'00' 00042900 DC C'CACCFMEM',C'[email protected]',X'00',X'00',X'00',X'00' 00043000 * BELOW USED BY DISPATCH 00043100 DC C'CAREPORT',C'CA$EPORT',X'00',X'80',X'00',X'00' 00043200 * BELOW USED BY CA-1 & CA-TLMS 00043300 DC C'CATAPE ',C'[email protected] ',X'00',X'80',X'00',X'00' 00043400 * BELOW USED BY VMAN 3.0 00043500 DC C'CAVAPPL ',C'[email protected] ',X'00',X'00',X'00',X'00' 00043600 * BELOW USED BY DOCVIEW 00043700 DC C'DOCVIEW ',C'DOCVIEW ',X'00',X'80',X'00',X'00' 00043800 * BELOW USED BY ???? 00043900 DC C'CALENDAR',C'[email protected]',X'00',X'80',X'00',X'00' CA-7 00044000 DC C'DTSYSTEM',C'[email protected]',X'00',X'80',X'00',X'00' 00044100 DC C'DTADMIN ',C'[email protected] ',X'00',X'80',X'00',X'00' 00044200 DC C'DTTABLE ',C'[email protected] ',X'00',X'80',X'00',X'00' 00044300 DC C'DTUTIL ',C'[email protected] ',X'00',X'80',X'00',X'00' 00044400 DC C'DUC ',C'TD$CTRN ',X'00',X'80',X'00',X'00' 00044500 DC C'JOBNAME ',C'[email protected] ',X'00',X'00',X'00',X'00' 00044600 DC C'MICCMD ',C'[email protected] ',X'00',X'80',X'00',X'00' 00044700 DC C'OPCMD ',C'[email protected] ',X'00',X'80',X'00',X'00' 00044800 DC C'PANEL ',C'[email protected] ',X'00',X'80',X'00',X'00' 00044900 DC C'RECIPID ',C'[email protected] ',X'00',X'80',X'00',X'00' 00045000 DC C'SCHEDULE',C'[email protected]',X'00',X'00',X'00',X'00' 00045100 * DC C'SUBMIT ',C'[email protected] ',X'00',X'80',X'00',X'00' 00045200 DC C'SUBMIT ',C'[email protected] ',X'00',X'00',X'00',X'00' T62T649 00045300 DC C'STATION ',C'[email protected] ',X'00',X'00',X'00',X'00' 00045400 * 00045500 DC C'DXTABLE ',C'[email protected] ',X'00',X'80',X'00',X'00' TB49543 00045600 DC C'DCTABLE ',C'[email protected] ',X'00',X'80',X'00',X'00' TB49543 00045700 DC C'DFTABLE ',C'[email protected] ',X'00',X'80',X'00',X'00' TB49543 00045800 DC C'DRTABLE ',C'[email protected] ',X'00',X'80',X'00',X'00' TB49543 00045900 DC C'DSTABLE ',C'[email protected] ',X'00',X'80',X'00',X'00' TB49543 00046000 * BELOW USED BY Scheduler T62T649 00046100 DC C'CALENDAR',C'[email protected]',X'00',X'00',X'00',X'00' T62T649 00046200 DC C'DATETAB ',C'[email protected] ',X'00',X'00',X'00',X'00' T62T649 00046300 * BELOW USED BY UNIVERSE 00046400 DC C'UNVEDIT ',C'[email protected] ',X'00',X'00',X'00',X'00' 00046500 DC C'UNVRPRT ',C'[email protected] ',X'00',X'00',X'00',X'00' 00046600 DC C'UNVPGM ',C'[email protected] ',X'00',X'00',X'00',X'00' 00046700 * BELOW USED BY VMAN 00046800 DC C'VMANAPPL',C'[email protected]',X'00',X'00',X'00',X'00' 00046900 DC C'VTRMNODE',C'[email protected]',X'00',X'00',X'00',X'00' 00047000 RESTBEND DC C'ZZZZZZZZ',C'ZZZZZZZZ',X'00',X'00',X'00',X'00' 00047100 EJECT 00047200
The new method involving the use of the RACFCLASS control statement would require the following statement to change PANEL to NOT issue a FASTAUTH check:
RACFCLASS PANEL,[email protected],FASTAUTH=NO
The Release Notes provides a nice diagram of the default dynamic table as shown here: