Enabling a z/OS application to send RACF PassTickets

If Db2 has been enabled to receive a RACF PassTicket as a password, a z/OS application that connects to Db2 can be enabled to generate and use a RACF PassTicket as a password in the connection request.

For information about building applications that are authorized to generate and use RACF PassTickets, see the RACF topic Generating and evaluating a PassTicket .

Requirements:
  • When you authorize an application to generate a RACF PassTicket, you must specify a specific Db2 subsystem or members of a specific Db2 data sharing group. Only those applications that meet this requirement will be able to generate a RACF PassTicket. For more information about using PassTickets to permit application user IDs to access Db2, see the aforementioned RACF topic.
  • Only z/OS application requests that originate from a Db2 for z/OS DRDA requester can connect to Db2 with a RACF protected user ID. The use of RACF protected user IDs is not supported by non-z/OS DRDA requesters.