Objectstar for z/OS 4.0 and 4.1.1 RACF security classes HRNEE and HRNCO are incompatible with IBM z/OS security class naming conventions.

Objectstar for z/OS 4.0 and 4.1.1 RACF security classes HRNEE and HRNCO are incompatible with IBM z/OS security class naming conventions.

book

Article ID: KB0092240

calendar_today

Updated On:

Products Versions
TIBCO ObjectStar Integration Foundation -
Not Applicable -

Description

Resolution:
Description:
The security classes HRNCO and HRNEE are non-standard security names and raise assembly warnings within RACF since they do not conform to IBM's z/OS RACF policy found in the "Security Server RACF Macros and Interfaces" (SA22-7682-13) manual page 3 which states for the ICHERCDE macro definition:        
                                                                
"CLASS=class name
Specifies the name of the resource class. The name must be 1–8 characters long and must consist of the following: A through Z, 0 through 9, or # (X'7B'), @ (X'7C'), $ (X'5B'). The first character must be A through Z, # (X'7B'), @ (X'7C'), or $ (X'5B'). You must include a # (X'7B'), @ (X'7C'), $ (X'5B'), or numeric character in the name of any class you define in order to guarantee that installation-defined classes do not conflict with classes supplied by IBM. In this way, classes supplied by IBM should always have unique class names. If this rule is not followed, the assembler issues a severity 4 MNOTE warning."
  


Environment:
TIBCO ObjectStar Integration Foundation for z/OS 4.0.x
TIBCO ObjectStar for z/OS 4.1.x
TIBCO Object Service Broker for z/OS 5.0.0

Operating System(s) impacted:
z/OS systems running RACF security software

Symptoms
Assembly warning message:
    4,*** CLASS NAME DOES NOT CONTAIN NATIONAL CHARACTER OR DIGIT ***


Resolution
TIBCO Object Service Broker for z/OS 5.0.0 now uses the product prefix S6B for messages, modules and RACF resource names. This prefix is registered with IBM for the exclusive use of TIBCO products. See TIBCO Object Service Broker for z/OS 5.0.0 CNTL file, members SECCORAC and SECEEACF, for a description of the changes and compatibility options provided.

Summary of Resource Names:

     DOB           Default          pre-ObjectStar 5.0  
   Parameter        Value                 Value        
------------    -------------     --------------------
SECCLASS        S6BDOB            HRNCO                
SECREQUESTOR    S6BDOBOP          HRNCROPS            
SECSUBSYSTEM    S6B               HURON                


                                                        
      EE           Default                            
   Parameter        Value           pre-ObjectStar 5.0
------------    -------------     --------------------
SECCLASS        S6BEE             HRNEE              
SECREQUESTOR    S6BEEOP           HRNDROPS            
SECSUBSYSTEM    S6B               HURON

Issue/Introduction

Objectstar for z/OS 4.0 and 4.1.1 RACF security classes HRNEE and HRNCO are incompatible with IBM z/OS security class naming conventions.