IBM GC28-1920-01 Server User Manual


 
For more information on the convert_id_np (BPX1CID) callable service, see
OS/390
OpenEdition Programming: Assembler Callable Services Reference
. The C
language support for the __convert_id_np() is discussed in
OS/390 R2 C/C
++
Run-Time Library Reference
New Application Authorization Service
A DCE application server on OS/390 can use DCE security services for access
control to resources that are owned by the application server. As an alternative,
the application developer can use RACF for access control for the set of resources
that are managed by the application server.
Consider that application servers that use DCE services exclusively on OS/390 are
the most portable to platforms that support DCE. If portability is not a primary
concern and the application developer wishes to centralize access control list
information in RACF, the application developer can consider using the
auth_check_resource_np service.
Through OS/390 OpenEdition MVS, a new a callable service
auth_check_resource_np (BPX1ACK) enables application servers to invoke RACF
authorization services. This callable service is also supported by the C runtime
library through the __check_resource_auth_np() function call. This service allows
application servers to perform authorization requests for resources that are defined
to RACF general resource classes.
For more information on the auth_check_resource_np callable service, see
OS/390
OpenEdition Programming: Assembler Callable Services Reference
.
Changes to the Class Descriptor Table
The maximum length of profile names has changed for the following classes:
INFOMAN
GINFOMAN
JCICSJCT
KCICSJCT
This change might require changes to customer code which uses these classes on:
RACROUTE REQUEST=FASTAUTH
RACROUTE REQUEST=AUTH, DEFINE, or EXTRACT, if the ENTITY keyword
is used instead of ENTITYX
IBM products should not need changes, because their usage of these fields is
compatible with this change.
Programming Interfaces
For a summary of changes to the programming interfaces for RACF for OS/390
Release 2, see:
“Class Descriptor Table (CDT)” on page 13
“Data Areas” on page 16
“Exits” on page 16
Chapter 10. Application Development Considerations 53