Writing An Early Verification Routine - IBM SC34-6814-04 Customization Manual

CICS defers the creation of the accessor environment element until the
RACROUTE REQUEST=VERIFY macro with the ENVIR=CREATE option is issued
to perform the normal verification routine. The ENVIR=CREATE version of the
macro is issued by the security manager domain running in supervisor state.
CICS passes the following information on the ENVIR=VERIFY version of the
RACROUTE REQUEST=VERIFY macro:
USERID
GROUP
PASSWRD
NEWPASS
OIDCARD
APPL
INSTLN
The installation data referenced by the INSTLN parameter includes a pointer,
UXPCOMM, to a two-word communications area that can be used to pass
information between the two phases of the signon verification process—between
the early verification routine initiated by ENVIR=VERIFY, and the normal verification
routine initiated by ENVIR=CREATE.
CICS maintains a separate communications area for each task, in CICS-key
storage.

Writing an early verification routine

An early verification routine, written for the ENVIR=VERIFY option, receives control
from SAF in the usual way from the external security manager whose entry point is
addressed by field SAFVRACR in the SAF vector table. It receives control in the
same state as its caller, as follows:
v Problem-program state
v Task mode (usually the CICS quasi-reentrant TCB)
v PSW storage key 8
v 31-bit addressing mode
v Primary address translation mode.
Register 13 points to a standard 18-word save area. Register 1 points to a 2-word
parameter list, where:
v The first word is the address of the SAF parameter list for the VERIFY function.
v The second word is the address of a 152-byte work area.
798
Customization Guide
The userid of the user signing on to the CICS region.
The group name, if specified, of the group into which the user wants to sign on.
The user's password to verify the userid.
A new value, if specified, for the user's password. This changes the existing
password and is to be used for subsequent signons.
The contents, if supplied, of an operator identification card.
The APPLID of the CICS region on which the user is signing on. Which APPLID
is passed depends on what is specified as system initialization parameters.
A pointer to a vector of CICS-related information, which you can map using the
DFHXSUXP mapping macro. This pointer is valid only if ESMEXITS=INSTLN is
specified as a system initialization parameter for the CICS region.