Portal | Manuals | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
Protecting CICS Load Modules

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS
View previous topic :: :: View next topic  
Author Message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 2:35 pm    Post subject: Protecting CICS Load Modules
Reply with quote

Hi,

In one of the CICS region we use, we are trying to protect the load modules without being modified anyone i.e. they should not new copy or use their load modules. I figured out two possible solutions, they are

1.Add a load library concatenation to the CICS job and move all the load modules required to be protected into that library. We can prevent anyone from modifying this by having RACF restrictions.

2. The other was to hold the load. But people use CECI release and they are modifying the load.

Can you please suggest me if there are any further options available to protect the load modules?

Regards
Jagan
Back to top
View user's profile Send private message

enrico-sorichetti

Global Moderator


Joined: 14 Mar 2007
Posts: 10326
Location: italy

PostPosted: Tue Dec 16, 2008 2:51 pm    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

protecting load library from updates is/must be part of the
general security plan/standards/pratices of Your organization
( in plain words.... who does what on what using what )

do You have one ???

proper promotion strategies,
proper library concatenation
proper authorization checking on transaction

should give You what You need.

but You cannot get it from forum answers
Back to top
View user's profile Send private message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 3:06 pm    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

Hi,

Thanks for the reply.
We do have proper promotion strategies and security procedures defined for each transaction. But the security check just verifies whether user have got access to that use that transaction or not. Currently we are planning to improve the strategy that is present and we need to protect certain load modules in the development regions. This is because we need a couple of programs to be similar in all the CICS regions we use.

Regards
Jagan
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8165
Location: East Dubuque, Illinois, USA

PostPosted: Tue Dec 16, 2008 6:12 pm    Post subject:
Reply with quote

I haven't seen it used before but there is a program option in CEDA called USELPACOPY. It requires certain SIT values be set but would almost certainly provide what you want since the program is loaded from the Link Pack Area, not from the CICS RPL. Consult with your site CICS support person for more information and help setting up the feature.
Back to top
View user's profile Send private message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 6:39 pm    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

Thanks Robert. I have requested the CICS team to create a separate group with all the module we require and specify the option as USELPACOPY(YESY). The one thing I am pondering now is that how and where do we copy the load modules to. In the CICS Transaction Server for OS/390 Installation Guide, it is mentioned to copy the load modules to hlq.SDFHLPA. But I couldnt find this library, I have requested the CICS team to specify the list of libraries thay use.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8165
Location: East Dubuque, Illinois, USA

PostPosted: Tue Dec 16, 2008 6:42 pm    Post subject:
Reply with quote

If they haven't used the USELPACOPY option before, there may not be an SDFHLPA library -- although I found we've got it so apparently it's a normal part of the installation process. The CICS support team can clarify the name they used for the library.
Back to top
View user's profile Send private message
Jagan Sachidanandam

New User


Joined: 11 Aug 2008
Posts: 14
Location: India

PostPosted: Tue Dec 16, 2008 6:45 pm    Post subject:
Reply with quote

Yes Robert, The CICS team mentioned that the library name they use is hlq.LPALIB. Thanks for the help
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8165
Location: East Dubuque, Illinois, USA

PostPosted: Tue Dec 16, 2008 6:54 pm    Post subject:
Reply with quote

Glad to be of assistance.
Back to top
View user's profile Send private message
parsesource

New User


Joined: 06 Feb 2006
Posts: 97

PostPosted: Sun Dec 28, 2008 1:29 am    Post subject: Reply to: Protecting CICS Load Modules
Reply with quote

not every module can be loaded to lpa

requirements:

http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp?topic=/com.ibm.cics.ts31.doc/dfhp3/dfhp3on.htm
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> CICS All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Identifying Interfaces in CICS/mainframe Ashishpanpaliya CICS 5 Fri Oct 13, 2017 3:21 pm
No new posts Table(Unicode(Graphic) table) loading... muralikrishnan_new DB2 0 Thu Oct 05, 2017 5:10 pm
No new posts Accessing CICS tran with map from JCL... navdeepaggarwal CICS 5 Tue Oct 03, 2017 6:15 pm
No new posts Partial color change of a field in CI... waseem0424 CICS 5 Fri Sep 29, 2017 7:56 pm
No new posts FUSE - IBM MQ - CICS integration error Kevin Vaz CICS 1 Mon Sep 18, 2017 4:31 pm

Facebook
Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us