GMTRAN
The GMTRAN system initialization parameter specifies the ID of a transaction.
- The specified transaction is automatically initiated (ATI) when terminals are logged on to CICS® by z/OS® Communications Server, and LOGONMSG(YES) is specified in the TYPETERM definition.
- The specified transaction is set to be the next transaction initiated by the terminal operator
following expiry of the terminal user's TIMEOUT period (specified in the External Security Manager),
and either of the following attributes is specified in the TYPETERM definition:
- LOGONMSG(YES) and SIGNOFF(YES) or
- LOGONMSG(YES), SIGNOFF(LOGOFF) and DISCREQ(NO)
- LOGONMSG(YES) and SIGNOFF(YES)
- The specified transaction is automatically set to be the next transaction initiated when doing CESF logoff.
- You sign on successfully, as indicated by message DFHCE3549.or
- You cancel your sign-on, as indited by message DFHCE3543.
GMTRAN is initiated when terminals are logged on to CICS by z/OS Communications Server.
You can specify one of CICS-supplied transactions CSGM, CESL, or CESN, or a user transaction.
- GMTRAN=({CSGM|CESL|CESN|transaction-id}[,{EXIT|DISCONNECT}])
-
- CSGM
- This is the default. CSGM displays the text specified in the GMTEXT parameter.
- CESL or CESN
- You can also specify one of the CICS sign-on transactions, CESL or CESN, which also displays the text specified in the GMTEXT parameter.
- EXIT
- This option affects only CESN or CESL. When PF3 or PF15 is used, the sign-on transaction CESN or CESL terminates. The terminal session is not disconnected. This is the default.
- DISCONNECT
- This option affects only CESF, CESN, or CESL.
Transaction Effect CESN or CESL When PF3 or PF15 is used, the terminal session is disconnected and the sign-on transaction CESN or CESL terminates. CESF The terminal session is disconnected. The TYPETERM attribute DISCREQ is not used for the terminal at which CESF, CESN, or CESL is used to disconnect a terminal session.
The GMTRAN parameter can be used with the LGNMSG parameter to retrieve z/OS Communications Server logon data.
Security considerations
When CESN or CESL is in use for terminal sign-on, you can control what happens if the user fails to complete the sign-on, by setting the EXIT or DISCONNECT option.
When PF3 or PF15 is used, by default (EXIT) the CICS sign-on transaction terminates but the terminal session remains connected. If the user fails to complete the sign-on, all subsequent transactions use the CICS default user ID. This situation might compromise the terminal session security.
To allow for better terminal session security, you can specify CESN or CESL with option DISCONNECT on GMTRAN. This setting allows terminal users to either enter with a valid sign-on credential or disconnect the terminal session. To do the same if you specify a user transaction on GMTRAN, you should define the user transaction to initiate CESN or CESL; otherwise, the user transaction should determine what actions to take.
Another security advantage in using GMTRAN=(,DISCONNECT) is to ensure that when users issue CESF, their terminal sessions are disconnected upon sign-off.