Coexisting with other DFSFLGX0, DFSISVI0, and DFSAOE00 exit routines

IBM Security Guardium S-TAP for IMS provides product-specific DFSAOE00, DFSFLGX0 (IMS Logger), and DFSISVI0 (IMS Batch) exits to enable the product to report on IMS DL/I call activity. The product-specific DFSAOE00 (Type-2 AOIE exit) enables IBM Security Guardium S-TAP for IMS to audit IMS DBR commands. In some IMS environments, user requirements or third-party vendor products also require use of these exits. IBM Security Guardium S-TAP for IMS can accommodate the use of multiple DFSFLGX0, DFSISVI0, and DFSAOE00 exit routines.

Using IMS Tools Generic Exits

IMS Tools Generic Exits are a collection of components that provide common command and exit routine interfaces to support the operation of IMS tools in an IMS environment.

IBM Security Guardium S-TAP for IMS supports the protocols used by the IMS Tools Generic Exit product. You can define the IBM Security Guardium S-TAP for IMS copy of the DFSFLGX0 exit by either supplying IMS with a PROCLIB member using a BPE-style control statement, or by building a load module that contains the required information.

An example of the PROCLIB control statement follows:

EXITDEF(TYPE(LOGR) EXITNAME(AUIFLGX0) LOADLIB(AUI.SAUIIMOD))

See the IBM IMS Tools Generic Exit Reference Manual for Generic Logger Exit setup and usage.

Important: The IBM IMS Tools Generic Exit product does not support exit DFSISVI0.

Using IBM Security Guardium S-TAP for IMS exit cascading

When the IBM IMS Tools Generic Exit is not available for use, IBM Security Guardium S-TAP for IMS provides a way to support two instances of the DFSFLGX0 and DFSISVI0 exits.

When loaded and run, the IBM Security Guardium S-TAP for IMS-supplied program AUIFLGX0 (DFSFLGX0) and AUIISVI0 (DFSISIV0) determines from which DSN within the JOBLIB/STEPLIB concatenation it was loaded from. It then searches all subsequent DSNs within the JOBLIB/STEPLIB DD concatenation, looking for the next occurrence of the exit with the same name.

If none are found, or it is determined that the IMS Tools Generic Exit product is involved in executing the exit, no cascading is done.
If an exit is found, and it is determined that the exit found is in fact another instance of the IBM Security Guardium S-TAP for IMS exit (as could happen if the SAUIIMOD data set was specified multiple times in the JOBLIB/STEPLIB concatenation), the search will continue with the remainder of the DSNs in the concatenation.
If a non-IBM Security Guardium S-TAP for IMS Exit is found, this new exit is loaded, and called with R13 pointing to the save area supplied by IMS. A new 512 byte user work area, obtained specifically for this exit instance, is then pointed to by the SXPLAWRK field of the IMS Standard User Exit Parameter List (DFSSXPL). This 512 byte work area is obtained when the first (or INIT) call is done; the work area address (in the SXLPAWRK field) and work area content are maintained for all subsequent calls.

The IBM Security Guardium S-TAP for IMS-supplied program AUIAOE00 (DFSAOE00) does not use its own exit cascading. Instead, AUIAOE00 co-exists with other IMS Type-2 AOIE exits, each having its own name in the DFSDFxxx EXITDEF TYPE=AOIE exit list.

Exit cascading restrictions

Note: These restrictions only apply when using the exit cascading feature, and not when using the IBM IMS Tools Generic Exit product.

The IBM Security Guardium S-TAP for IMS Exit (AUIFLGX0 or AUIISVI0) must be first in the JOBLIB/STEPLIB concatenation, unless the exit that exists in a prior DSN also has a method of cascading calls to other exits, and is capable of providing an IMS formatted area in R13 and the address of a unique, persistent 512 byte work area in the SXPLAWRK parameter list field to the AUIFLGX0 or AUIISVI0 program.

In a non-APF-authorized environment, such as when executing program DFSULTR0 or an IMS DLI/DBB batch program, the exit load module to be cascaded to must have an ALIAS, and the ALIAS must be appropriately either DFSFLGX0 or DFSISVI0, if the target exit module has the RENT or REUS attribute on.