BEA eLink TCP for TUXEDO 3.0   Information Center     

        HOME   |   SEARCH   |   CONTACT   |   PDF FILES |   WHAT'S NEW 
 
        TABLE OF CONTENTS   |   PREVIOUS TOPIC   |   NEXT TOPIC   |   INDEX  

Data Area Security

BEA eLink for Mainframe TCP for TUXEDO (hereafter referenced as eLink TCP for TUXEDO) uses data area security which is a specialized security protocol for the following cases:

In these cases, a client's USERID, group name, and LTERM can be specified in the data area of a request. For TUXEDO clients, user information specified in the data area is verified by the remote gateway in the usual manner. For remote clients, remote user information is placed in the data area fields by the local gateway to be used by TUXEDO services. In this case, the remote client does not have to populate these fields, but must allocate space for them in the data area.

Enabling Data Area Security

Complete the following tasks to enable data area security.

  1. Add fields to the user's data area on the local and remote hosts. These fields are passed to and from the mainframe host. For the field formats, refer to Listing B-1.

  2. Set WRAP=TPSD in the *FOREIGN section corresponding to the remote host in the GWICONFIG file. For syntax and parameter definitions for the *FOREIGN section of the GWICONFIG file, refer to "Defining the *FOREIGN Section of the GWICONFIG File."

  3. Populate the data area with the user information before sending a request to a remote service.

  4. The remote user's information is populated into the data area when a request is received for a local service.

    Note: If using a VIEW data format, allocate the extra fields before the application data as defined in Listing B-1. If using the STRING data format, allocate 24 additional bytes at the beginning of the string to be used for the security fields.

Format

The user data area fields in C use the following format.

Listing B-1 Syntax for C User Data Area Fields 
struct da_security {
       char uname[8];  /*user name*/
       char group[8];  /*user group*/
       char lterm[8];  /*terminal id*/
       /*user data is appended here*/
}

          TABLE OF CONTENTS   |   PREVIOUS TOPIC   |   NEXT TOPIC   |   INDEX