Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

Protecting CICS Load Modules

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS
View previous topic :: :: View next topic  
Author Message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 2:35 pm    Post subject: Protecting CICS Load Modules
Reply with quote

Hi,

In one of the CICS region we use, we are trying to protect the load modules without being modified anyone i.e. they should not new copy or use their load modules. I figured out two possible solutions, they are

1.Add a load library concatenation to the CICS job and move all the load modules required to be protected into that library. We can prevent anyone from modifying this by having RACF restrictions.

2. The other was to hold the load. But people use CECI release and they are modifying the load.

Can you please suggest me if there are any further options available to protect the load modules?

Regards
Jagan
Back to top
View user's profile Send private message

enrico-sorichetti

Global Moderator


Joined: 14 Mar 2007
Posts: 10211
Location: italy

PostPosted: Tue Dec 16, 2008 2:51 pm    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

protecting load library from updates is/must be part of the
general security plan/standards/pratices of Your organization
( in plain words.... who does what on what using what )

do You have one ???

proper promotion strategies,
proper library concatenation
proper authorization checking on transaction

should give You what You need.

but You cannot get it from forum answers
Back to top
View user's profile Send private message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 3:06 pm    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

Hi,

Thanks for the reply.
We do have proper promotion strategies and security procedures defined for each transaction. But the security check just verifies whether user have got access to that use that transaction or not. Currently we are planning to improve the strategy that is present and we need to protect certain load modules in the development regions. This is because we need a couple of programs to be similar in all the CICS regions we use.

Regards
Jagan
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7932
Location: Bellevue, IA

PostPosted: Tue Dec 16, 2008 6:12 pm    Post subject:
Reply with quote

I haven't seen it used before but there is a program option in CEDA called USELPACOPY. It requires certain SIT values be set but would almost certainly provide what you want since the program is loaded from the Link Pack Area, not from the CICS RPL. Consult with your site CICS support person for more information and help setting up the feature.
Back to top
View user's profile Send private message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 6:39 pm    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

Thanks Robert. I have requested the CICS team to create a separate group with all the module we require and specify the option as USELPACOPY(YESY). The one thing I am pondering now is that how and where do we copy the load modules to. In the CICS Transaction Server for OS/390 Installation Guide, it is mentioned to copy the load modules to hlq.SDFHLPA. But I couldnt find this library, I have requested the CICS team to specify the list of libraries thay use.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7932
Location: Bellevue, IA

PostPosted: Tue Dec 16, 2008 6:42 pm    Post subject:
Reply with quote

If they haven't used the USELPACOPY option before, there may not be an SDFHLPA library -- although I found we've got it so apparently it's a normal part of the installation process. The CICS support team can clarify the name they used for the library.
Back to top
View user's profile Send private message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 6:45 pm    Post subject:
Reply with quote

Yes Robert, The CICS team mentioned that the library name they use is hlq.LPALIB. Thanks for the help
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7932
Location: Bellevue, IA

PostPosted: Tue Dec 16, 2008 6:54 pm    Post subject:
Reply with quote

Glad to be of assistance.
Back to top
View user's profile Send private message
parsesource

New User


Joined: 06 Feb 2006
Posts: 97

PostPosted: Sun Dec 28, 2008 1:29 am    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

not every module can be loaded to lpa

requirements:

http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp?topic=/com.ibm.cics.ts31.doc/dfhp3/dfhp3on.htm
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts CICS transaction slow response time vasanthz All Other Mainframe Topics 1 Thu Jan 19, 2017 1:31 am
No new posts INDEPENDENT CICS TS 4.1 MRO REGION UP... Kyle Carroll CICS 0 Wed Dec 14, 2016 6:55 pm
No new posts CICS START AND CANCEL blayek CICS 1 Wed Dec 07, 2016 3:27 am
No new posts How does a called pgm know if its cal... Graeme Westerman COBOL Programming 4 Tue Nov 29, 2016 9:25 pm
No new posts CICS Roll back partially - Need to re... dwijadas CICS 4 Wed Nov 16, 2016 4:30 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us