PUBLOG (JANUS DEFINE parameter): Difference between revisions
mNo edit summary |
mNo edit summary |
||
| Line 4: | Line 4: | ||
<var>PUBLOG</var> is a parameter on [[JANUS DEFINE]], which defines and sets characteristics of a Janus port. See the [[JANUS DEFINE#parmlist|List of JANUS DEFINE parameters]]. | <var>PUBLOG</var> is a parameter on [[JANUS DEFINE]], which defines and sets characteristics of a Janus port. See the [[JANUS DEFINE#parmlist|List of JANUS DEFINE parameters]]. | ||
This parameter indicates that a "real" login should be done for the SOCKUSER userid for SRVSOCK logons. The "real" login will be a trusted login so passwords will not be required from end-users but the SOCKUSER userid '''must''' be defined in CCASTAT or to the external authorizer (RACF, ACF2 or Top Secret) if <var>PUBLOG</var> is specified for a port. If <var>PUBLOG</var> is '''not''' specified, the SOCKUSER userid will be logged on for SRVSOCK logons whether or not it is defined in CCASTAT or to an external authorizer, and it will be given UPRIV 0 (default user privileges). | This parameter indicates that a "real" login should be done for the <var>[[SOCKUSER (JANUS DEFINE parameter)|SOCKUSER]]</var> userid for SRVSOCK logons. The "real" login will be a trusted login so passwords will not be required from end-users but the <var>SOCKUSER</var> userid '''must''' be defined in CCASTAT or to the external authorizer (RACF, ACF2 or Top Secret) if <var>PUBLOG</var> is specified for a port. If <var>PUBLOG</var> is '''not''' specified, the <var>SOCKUSER</var> userid will be logged on for SRVSOCK logons whether or not it is defined in CCASTAT or to an external authorizer, and it will be given UPRIV 0 (default user privileges). | ||
<var>PUBLOG</var> can be used if even public logins should be logged by an external authorizer (as a matter of policy) or if non-standard privileges are to be assigned to the public user. Use caution if assigning any privileges to the SOCKUSER userid since this can be a potential security exposure. | <var>PUBLOG</var> can be used if even public logins should be logged by an external authorizer (as a matter of policy) or if non-standard privileges are to be assigned to the public user. Use caution if assigning any privileges to the <var>SOCKUSER</var> userid since this can be a potential security exposure. | ||
Valid only for SRVSOCK ports. | Valid only for SRVSOCK ports. | ||
Revision as of 23:47, 27 February 2012
<section begin="desc" />For 'real' logon.<section end="desc" />
PUBLOG is a parameter on JANUS DEFINE, which defines and sets characteristics of a Janus port. See the List of JANUS DEFINE parameters.
This parameter indicates that a "real" login should be done for the SOCKUSER userid for SRVSOCK logons. The "real" login will be a trusted login so passwords will not be required from end-users but the SOCKUSER userid must be defined in CCASTAT or to the external authorizer (RACF, ACF2 or Top Secret) if PUBLOG is specified for a port. If PUBLOG is not specified, the SOCKUSER userid will be logged on for SRVSOCK logons whether or not it is defined in CCASTAT or to an external authorizer, and it will be given UPRIV 0 (default user privileges).
PUBLOG can be used if even public logins should be logged by an external authorizer (as a matter of policy) or if non-standard privileges are to be assigned to the public user. Use caution if assigning any privileges to the SOCKUSER userid since this can be a potential security exposure.
Valid only for SRVSOCK ports.
References
See: List of Janus commands | List of JANUS DEFINE parameters.