Security and the IMS Connect user message exit routines

IMS Connect user message exit routines can perform security checking. If configure your exit routines to check security, you must provide a security exit or use the z/OS® TCP/IP IMS Listener security exit (IMSLSECX).

IMS does not provide a sample security exit due to the many options available for security and the fact that most installations have their own specific security method. The call to RACF® is performed by IMS Connect if RACF parameters are provided in the OTMA header when the message exit returns the message.

IMSLSECX is the name of the security exit called by the following IMS Connect user message exit routines:

• HWSSMPL0
• HWSSMPL1
• HWSSOAP1
• HWSCSLO0

If you use HWSSMPL0 or HWSSMPL1, you can change the name of the security exit that they call by changing EXTRN IMSLSECX to a name of your choice. If you change the name of the security exit, you must define the security exit in the HWSSMPL0 or HWSSMPL1 user message exit.

You can also provide the name of the security exit called by HWSJAVA0 and define it in the HWSJAVA0 message exit.