IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

RACF as API Endpoint


IBM Mainframe Forums -> All Other Mainframe Topics
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1744
Location: Tirupur, India

PostPosted: Tue Apr 14, 2020 9:24 am
Reply with quote

Hi,

We have a windows desktop application and want to enable RACF based authentication for enabling logon to the application.

Is there anyway we can make a call from Windows to RACF, passing Mainframe USERID and PASSWORD and RACF should return "Authenticated" or "Not Authenticated".
The requirement is sort of exposing RACF function as an API endpoint.

Apart from userid/password authentication, we also need to be able to change user's password by mentioning old and new passwords.

Could you please point me to a product or approach to achieve this. Thank you.
Back to top
View user's profile Send private message
Apoorva

New User


Joined: 28 Jan 2020
Posts: 49
Location: India

PostPosted: Tue Apr 14, 2020 10:27 am
Reply with quote

vasanthz wrote:
Hi,

We have a windows desktop application and want to enable RACF based authentication for enabling logon to the application.

Is there anyway we can make a call from Windows to RACF, passing Mainframe USERID and PASSWORD and RACF should return "Authenticated" or "Not Authenticated".
The requirement is sort of exposing RACF function as an API endpoint.

Apart from userid/password authentication, we also need to be able to change user's password by mentioning old and new passwords.

Could you please point me to a product or approach to achieve this. Thank you.


Please review Z/OS connect REST APIs link below,

www.ibm.com/support/knowledgecenter/SS7K4U_liberty/com.ibm.websphere.wlp.zseries.doc/ae/twlp_zconnect_rest.html
Back to top
View user's profile Send private message
Joerg.Findeisen

Senior Member


Joined: 15 Aug 2015
Posts: 1306
Location: Bamberg, Germany

PostPosted: Tue Apr 14, 2020 12:00 pm
Reply with quote

Apoorva wrote:
vasanthz wrote:
Hi,

We have a windows desktop application and want to enable RACF based authentication for enabling logon to the application.

Is there anyway we can make a call from Windows to RACF, passing Mainframe USERID and PASSWORD and RACF should return "Authenticated" or "Not Authenticated".
The requirement is sort of exposing RACF function as an API endpoint.

Apart from userid/password authentication, we also need to be able to change user's password by mentioning old and new passwords.

Could you please point me to a product or approach to achieve this. Thank you.


Please review Z/OS connect REST APIs link below,

www.ibm.com/support/knowledgecenter/SS7K4U_liberty/com.ibm.websphere.wlp.zseries.doc/ae/twlp_zconnect_rest.html


When STFW it reveals something Microsoft Enterprise SSO related stuff for that purpose but I might be wrong. icon_confused.gif
Back to top
View user's profile Send private message
Rohit Umarjikar

Global Moderator


Joined: 21 Sep 2010
Posts: 3075
Location: NYC,USA

PostPosted: Wed Apr 15, 2020 1:49 am
Reply with quote

We do have that, GUI first make a call to MF RACF modules to validate the user id for that application. Only thing is , the user id is not same as racf id in my case. Once upon getting info from the GUI team I shall update further if that's really what needed here.
Back to top
View user's profile Send private message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1744
Location: Tirupur, India

PostPosted: Thu Apr 16, 2020 3:17 am
Reply with quote

Thank you for the responses. z/OS Connect looks promising. Let me try if it can perform authentication services.
Back to top
View user's profile Send private message
vasanthz

Global Moderator


Joined: 28 Aug 2007
Posts: 1744
Location: Tirupur, India

PostPosted: Sun Apr 19, 2020 1:54 pm
Reply with quote

Fiddled with writing a CGI script to accept credentials and run RACF commands, but it was very unsecure with security holes, which I dont know how to fix.

Other approach,
Created a CICS region and enabled web interface on it. This interface provided a way to enter USERID/PASSWORD credentials and validate them via RACF. Not a straight forward method. But works OK.
enterprisesystemsmedia.com/article/the-simple-path-to-web-enabling-a-legacy-cics-application#&ts=undefined
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> All Other Mainframe Topics

 


Similar Topics
Topic Forum Replies
No new posts RACF - Rebuild SETROPTS command which... All Other Mainframe Topics 3
No new posts RACF cost vs. ACF2 cost IBM Tools 2
No new posts CICS Access to RACF CICS 2
No new posts CICS RACF & DB2CONN CICS 2
No new posts RACF passphrase implementation problems All Other Mainframe Topics 1
Search our Forums:

Back to Top