Top Secret Equivalents of RACF Commands For CSSMTP AUTH configuration

Products

• Top Secret

Issue/Introduction

What are the Top Secret equivalent of the following RACF commands?

//** Activate the required classes:

//* SETROPTS CLASSACT(LDAPBIND)

//* SETROPTS CLASSACT(KEYSMSTR)

//* SETROPTS RACLIST(KEYSMSTR)

//* RDEFINE KEYSMSTR LDAP.BINDPW.KEY SSIGNON(KEYENCRYPTED(0023528875DECFAC))

//* SETROPTS RACLIST(KEYSMSTR) REFRESH

//* RDEFINE LDAPBIND target.mail.server PROXY(BINDDN('username') BINDPW('password’))

//* RDEFINE FACILITY BPX.SERVER UACC(NONE)

//* PERMIT BPX.SERVER CLASS(FACILITY) ID(CSSMTP) ACCESS(READ)

Resolution

Here are the RACF commands and the Top Secret equivalents (in red).

//** Activate the required classes:

//* SETROPTS CLASSACT(LDAPBIND)

No TSS equivalent.

//* SETROPTS CLASSACT(KEYSMSTR)

No TSS equivalent.

//* SETROPTS RACLIST(KEYSMSTR)

No TSS equivalent.

//* RDEFINE KEYSMSTR LDAP.BINDPW.KEY SSIGNON(KEYENCRYPTED(0023528875DECFAC))

TSS Equivalent:

TSS ADD(SDT) KEYSMSTR(LDAP.BINDPW.KEY) DCENCRY(0023528875DECFAC) KEYENCRY

(DCENTRY is a 16-byte encryption key)

//* SETROPTS RACLIST(KEYSMSTR) REFRESH

No TSS equivalent.

//* RDEFINE LDAPBIND target.mail.server PROXY(BINDDN('username') BINDPW('password’))

***TSS Equivalent:

TSS ADDTO(SDT) EIMPROF(name) PRXLDAPHST(target.mail.server) PRXBINDDN('username’) PRXBINDPW(‘password’)

Where ‘name’ is the EIM (Enterprise Identity Mapping) Profile name (default EIM record).

//* RDEFINE FACILITY BPX.SERVER UACC(NONE)

TSS Equivalent:

TSS ADD(dept) IBMFAC(BPX.SERV)    (if not already done. The IBMFAC resource class only allows up to 8 characters in the resource name in the TSS ADD command.)

//* PERMIT BPX.SERVER CLASS(FACILITY) ID(CSSMTP) ACCESS(READ)

TSS Equivalent:

TSS PERMIT(CSSMTP) IBMFAC(BPX.SERVER) ACCESS(READ)