For Non-Racf Users - The Esm Parameter List; For Racf Users - The Racf User Exit Parameter List - IBM SC34-6814-04 Customization Manual

For non-RACF users — the ESM parameter list
CICS (or another caller) passes information to your external security manager in the
ESM parameter list, the address of which can be calculated using field SAFPRACP
of the MVS router parameter list.
When the caller is CICS, the "INSTLN" field of the ESM parameter list points to the
installation data parameter list, which contains CICS-related information that can be
used by ESM exit programs.
The format of the ESM parameter list, and the actual name of the "INSTLN" field,
vary, depending on which CICS security event is being processed. (The "request
type" field (SAFPREQT) of the router parameter list shows why the ESM is being
called by indicating the RACROUTE REQUEST type.) Table 45 shows how some
formats of the ESM parameter list can be mapped using MVS macros.
Note: The INSTLN field points to the installation parameter list only if you specify
For RACF users — the RACF user exit parameter list
If you are a RACF user, you can find the address of the installation data parameter
list directly from the RACF user exit parameter list. The name of the relevant field in
the user exit parameter list varies according to the RACROUTE REQUEST type
and the RACF user exit that is invoked. The relationships between REQUEST type,
exit name, and field name are shown in Table 46.
792
Customization Guide
Table 45. Mapping the ESM parameter list
RACROUTE REQUEST
type
VERIFY
AUTH
FASTAUTH
LIST
EXTRACT
INSTLN on the ESMEXITS system initialization parameter. The default value
of this parameter is NOINSTLN, which means that no installation data is
passed.
Table 46. Obtaining the address of the installation data parameter list
RACROUTE RACF exit
REQUEST type
VERIFY ICHRIX01
VERIFY ICHRIX02
AUTH ICHRCX01
AUTH ICHRCX02
FASTAUTH ICHRFX01
FASTAUTH ICHRFX02
LIST ICHRLX01
LIST ICHRLX02
Parameter list mapping macro
IRRPRIPL
ICHACHKL
Not available
Not available
Not available
Exit list mapping
macro
ICHRIXP
ICHRIXP
ICHRCXP
ICHRCXP
ICHRFXP
ICHRFXP
ICHRLX1P
ICHRLX2P
INSTLN field name
INITIPTR (X'10')
ACHKIN31 (X'20')
Offset X'18'
Offset X'0C'
None
Parameter list field
name
RIXINSTL
RIXINSTL
RCXINSTL
RCXINSTL
RFXANSTL
RFXANSTL
RLX1INST
RLX2PRPA See note
2.