Supporting parallel PassTicket requests for the same user ID

PassTickets are one-time use tickets. The generation mechanism has a granularity of 1 second; therefore, if the same command to generate a PassTicket for a user ID is issued twice within the same second, it will generate the same PassTicket. This would limit requests that use PassTickets to one per second for each applid. However, it is possible to support parallel PassTicket requests for the same user ID.

To allow more than one request per second per user for an applid, you can define separate keys for separate groups for a user.

RDEF PTKTDATA applid.group1.userid SSIGNON(KEYMASKED(key1)) UACC(NONE)
RDEF PTKTDATA applid.group2.userid SSIGNON(KEYMASKED(key2)) UACC(NONE)

You must write custom code that generates PassTickets with the appropriate key.

For the destination region to accept the PassTicket, the region will need to use the group associated with the key when authenticating the password, for example, on the SIGNON or VERIFY PASSWORD command. If no group is specified, the default group is used.