IBM Tivoli NetView for z/OS, Version 6.2

Activating the SAF Command Authorization

Activate command security defined in the NETCMDS class in your SAF product by entering:
 REFRESH CMDAUTH=SAF,BACKTBL=SECTABLE

In this example, a NetView® command authorization table named SECTABLE is used to protect immediate commands, and to backup the SAF product.

When you are certain that you do not want to use the NetView command authorization table as the primary type of command security, add the following statement to the CNMSTUSR or CxxSTGEN member:
SECOPTS.CMDAUTH = SAF.sec_table
To check your command authorization settings, use the NetView LIST SECOPTS commands to display the messages indicating that you are using an SAF product with a backup NetView command authorization table as shown in the following example:
NetView V5R2 - 7E         Tivoli NetView   NTV7E TOM      06/07/06 18:27:41
 * NTV7E    list secopts
 ' NTV7E
 BNH228I OPTION        VALUE         LAST UPDATED            UPDATE ID
 BNH229I -------       --------      -----------------       --------------
 BNH229I OPERSEC       NETVPW        06/07/06 09:59:30       INITIALIZATION
 BNH229I OPSPAN        SAF           06/07/06 09:59:30       OPER1    
 BNH229I CMDAUTH       SAF           06/07/06 09:59:30       OPER1    
 BNH229I BACKTBL       CNMSCAT2      06/07/06 09:59:30       INITIALIZATION    
 BNH229I AUTHCHK       SOURCEID      06/07/06 09:59:30       INITIALIZATION
 BNH229I SPANAUTH      NONE          06/07/06 09:59:07       INITIALIZATION
 BNH229I SPANCHK       SOURCEID      06/07/06 09:59:30       INITIALIZATION
 BNH229I CATAUDIT      NONE          06/07/06 09:59:07       INITIALIZATION
 BNH229I AUTOSEC       BYPASS        06/07/06 09:59:34       INITIALIZATION
 BNH229I SURROGAT      NO            06/07/06 09:59:30       INITIALIZATION
 BNH229I RMTSEC        NONE          06/07/06 09:59:40       INITIALIZATION
 BNH229I RMTAUTH       SENDER        06/07/06 09:59:30       INITIALIZATION
 BNH229I WEBAUTH       PASS          06/07/06 09:59:30       INITIALIZATION
 BNH230I END OF LIST SECOPTS INFORMATION
 ------------------------------------------------------------------------------

After successfully completing these steps, the command authorization in an SAF product provides function equivalent to the NetView command authorization table in the NetView product.



Feedback