Chapter 21. Writing A Security Exit Program For Iiop - IBM SC34-6814-04 Customization Manual

Chapter 21. Writing a security exit program for IIOP

Considerations common to all user-replaceable programs
Note that the comments contained in Chapter 5, "General notes about
user-replaceable programs," on page 435 apply to this chapter.
Incoming requests using the Internet Inter-ORB Protocol (IIOP) are processed by
CICS under a default user ID, unless you provide an IIOP security exit program to
assign a new user ID. The security exit program can use CICS services, such as a
task-related user exit program to access DB2, and application parameters encoded
within the body of the request.
You can define the name of the security program on the URM option of the
TCPIPSERVICE resource definition for the IIOP port. If no name is specified, or if
the AUTHENTICATE option is defined as CERTIFICATE, the security exit program
will not be called. Two sample security exit programs, DFHXOPUS and
DFHEBURM, are supplied.
The IIOP security program is passed a COMMAREA with the following format. If a
field does not exist, its pointer and length are zeroes:
Where:
standard_header
© Copyright IBM Corp. 1977, 2011
Offset Type
Hex
(0) STRUCTURE
(0) CHARACTER
(4) FULLWORD
(8) FULLWORD
(C) FULLWORD
(10) FULLWORD
(14) CHARACTER
(18) FULLWORD
(1C) FULLWORD
(20) FULLWORD
(24) FULLWORD
(28) FULLWORD
(2C) FULLWORD
(30) FULLWORD
(34) FULLWORD
(38) FULLWORD
(3C) CHARACTER
(44) FULLWORD
(48) FULLWORD
(4C) FULLWORD
(50) FULLWORD
contains a standard header with the following format:
function
1–character function code
domain
2–character field containing "II"
Len Name
80 sXOPUS
4 standard_header
4 pIIOPData
4 lIIOPData
4 pRequestBody
4 lRequestBody
4 corbaserver
4 pBeanName
4 lBeanName
4 BeanInterfaceType
4 pModule
4 lModule
4 pInterface
4 lInterface
4 pOperation
4 lOperation
8 userid
4 transid
4 flag_bytes
4 return_code
4 reason_code
663