|  | BEA eLink TCP for TUXEDO 3.0 Information Center
HOME | SEARCH | CONTACT | PDF FILES | WHAT'S NEW
| TABLE OF CONTENTS | PREVIOUS TOPIC | NEXT TOPIC | INDEX

# Data Area Security

BEA eLink for Mainframe TCP for TUXEDO (hereafter referenced as eLink TCP for TUXEDO) uses data area security which is a specialized security protocol for the following cases:

- User information is propagated across multiple TUXEDO domain boundaries

- A remote or local service requires a user's LTERM information

In these cases, a client's USERID, group name, and LTERM can be specified in the data area of a request. For TUXEDO clients, user information specified in the data area is verified by the remote gateway in the usual manner. For remote clients, remote user information is placed in the data area fields by the local gateway to be used by TUXEDO services. In this case, the remote client does not have to populate these fields, but must allocate space for them in the data area.

## Enabling Data Area Security

Complete the following tasks to enable data area security.

1. Add fields to the user's data area on the local and remote hosts. These fields are passed to and from the mainframe host. For the field formats, refer to Listing B-1.

2. Set WRAP=TPSD in the *FOREIGN section corresponding to the remote host in the GWICONFIG file. For syntax and parameter definitions for the *FOREIGN section of the GWICONFIG file, refer to "Defining the *FOREIGN Section of the GWICONFIG File."

3. Populate the data area with the user information before sending a request to a remote service.

4. The remote user's information is populated into the data area when a request is received for a local service.

   Note: If using a VIEW data format, allocate the extra fields before the application data as defined in Listing B-1. If using the STRING data format, allocate 24 additional bytes at the beginning of the string to be used for the security fields.

### Format

The user data area fields in C use the following format.

> Listing B-1 Syntax for C User Data Area Fields

>     struct da_security {
>            char uname[8];  /*user name*/
>            char group[8];  /*user group*/
>            char lterm[8];  /*terminal id*/
>            /*user data is appended here*/
>     }

TABLE OF CONTENTS | PREVIOUS TOPIC | NEXT TOPIC | INDEX