Table of Contents

Search

  1. Preface
  2. Part 1: PowerExchange Change Data Capture Introduction
  3. Part 2: CDC Components Configuration and Management
  4. Part 3: CDC Sources Configuration and Management
  5. Part 4: Change Data Extraction
  6. Part 5: Monitoring and Tuning
  7. Appendix A: CDC for z/OS Troubleshooting
  8. Appendix B: DTL__CAPXTIMESTAMP Time Stamps

Controlling Access to PowerExchange Agent Services

Controlling Access to PowerExchange Agent Services

You can restrict access to PowerExchange Agent services.
The hlq.SAMPLIB contains sample commands for the most common mainframe security products. The member #SECURTY directs you to the specific member for the type of security product for your system.
Any job that requests PowerExchange Agent services must be granted read access to this resource. The agent_ID variable is the AgentID specified in the AGENTCTL member and the default options module EDMSDIR.
In the following procedure, replace the variable hlq with the high-level qualifier that you chose when installing PowerExchange.
To control access to PowerExchange Agent services:
  1. In the
    hlq
    .RUNLIB library, locate the AGENTCTL member and verify that the value of the InitAuthCheck parameter is YES.
  2. Define the RACF resource profile, or an equivalent security system, named BMCEDM.agent_ID.REGISTER in class FACILITY.
    Defining this resource to RACF, or an equivalent security system, with UACC (READ) effectively disables registration security for PowerExchange Agent services. All RACROUTE macros that the agent issues are successful.
You can also disable registration security with the InitAuthCheck configuration parameter. Set its value to NO to disable security checking.

0 COMMENTS

We’d like to hear from you!