72
© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.
CICS TS 2.2
CICS TS Version 2.2 includes a full implementation of the EJB 1.1
security specification to provide method authorization checks through
the isCallerInRole API. The API is used to determine whether a user
is in a role that is authorized to execute a given method on an enterprise
bean by accessing RACF through the System Authorization Facility
(SAF) interface. APARs OW46859 and OW49190 must be applied to
OS/390 or z/OS.
The need to understand EJB architecture is lessened by the fact that
the method request executed by the enterprise bean runs under a CICS
transaction ID and is associated with a standard CICS user ID, and can
therefore be treated just like a procedural CICS transaction. A new
Java-based CICS utility is provided for defining RACF profiles.
Version 2.2 also includes the Java 2 security policy mechanism, by
which user-customized security policies can be used to control the
new persistent, reusable Java Virtual Machine (JVM) within CICS
TS. Users accessing CICS over Internet Inter-ORB Protocol (IIOP)
are authenticated, providing secure interoperability between CICS
and other IBM and non-IBM systems using the SSL client
authentication protocol.
A new getCallerPrincipal method returns a Principal object whose
getName method returns the distinguished name of the EJB client.
When the client is authenticated with an SSL certificate, the
distinguished name is extracted directly from that certificate; otherwise
it is generated from a user-replaceable module, DFHEJDNX.
IMS V8.1
Version 8 of IMS includes enhancements to Database Recovery
Control (DBRC). Recovery Control Dataset (RECON) Command
Authorization Support allows users to control RECON access/update
via DBRC batch commands or via the High Availability Large
Database (HALDB) Partition Definition Utility. Security criteria can
be customized and an audit trail maintained through a user exit.
MQSERIES GETS A NEW NAME
WebSphere MQ is the new name for MQSeries and is being phased in
Comentários a estes Manuais