SECCHK command (X'106E')

The distributed data management (DDM) architecture SECCHK command passes the user information from the source server to the target security manager of the IMS target server to authenticate the user with RACF® or another security product.

When security checking is active for the IMS target server, the SECCHK command must be preceded by the ACCSEC command.

Format

Read syntax diagramSkip visual syntax diagramDSSHDRLLCPPASSWORDSECMEC USRID

Parameters

DSSHDR
The 6-byte header that contains information about the data stream structure (DSS).
LL
The length specified as a 2-byte binary integer. This length includes LL and CP.
CP
X'106E', the 2-byte codepoint of the SECCHK command.
SECMEC
A required parameter that specifies the security mechanism agreed upon by the source server and the target server. For IMS, specify USRIDPWD.

The security mechanism is negotiated between the source server and the target server by using the ACCSEC command and the ACCSECRD reply object.

USRID
A required, variable-length parameter that specifies the user ID of the source application program as a character string. The length can be from 1 to 255 characters.
PASSWORD
A required, variable-length parameter that specifies the password of the source application program as a character string. The length can be from 1 to 255 characters.

Start of changeIf a RACF PassTicket is used to authenticate user access from an IMS Connect client to IMS DB, this parameter specifies the PassTicket.End of change

Usage

IMS uses a user ID and password to check security; therefore the value of the SECMEC parameter specifies the DDM USRIDPWD security mechanism.

If no errors occur during the processing of the SECCHK command, the IMS target server returns the SECCHKRM reply message to indicate the acceptability of the security information.

The SECCHK command must be preceded by the ACCSEC command.

Chained command objects

No command objects can be chained to the SECCHK command.

Positive reply messages

In response to the SECCHK command, the IMS target DDM server returns to the source server the following positive reply message:

SECCHKRM (X'1219')
Security check reply message.

Error reply messages

In response to the SECCHK command, the IMS target DDM server can return to the source DDM server the following error reply messages:

Table 1. Possible error reply messages for the SECCHK command
Codepoint of reply message Name of reply message Meaning of reply message
X'1218' MGRDEPRM Manager dependency error
X'121C' CMDATHRM Not authorized to command
X'1232' AGNPRMRM Permanent agent error
X'1233' RSCLMTRM Resource limits reached
X'123C' INVRQSRM Invalid request
X'1245' PRCCNVRM Conversational protocol error
X'124C' SYNTAXRM Data stream syntax error
X'1250' CMDNSPRM Command not supported
X'1251' PRMNSPRM Parameter not supported
X'1252' VALNSPRM Parameter value not supported
X'1253' OBJNSPRM Object not supported
X'1254' CMDCHKRM Command check reply message
X'125F' TRGNSPRM Target not supported