RUTKN
| Common Name: | User / Resource Security Token |
| Macro ID: | ICHRUTKN |
| DSECT Name: | TOKEN |
| Owning Component: | Resource Access Control Facility (SC1BN) |
| Eye-Catcher ID: | None |
| Storage Attributes: | Subpool, key, and residency are determined by user |
| Size: | 80 bytes |
| Created by: | RACROUTE REQUEST=VERIFY, VERIFYX, or TOKENBLD |
| Pointed to by: | ACEETOKP and also returned as an output parameter from RACROUTE REQUEST=VERIFYX or TOKENBLD. |
| Serialization: | None |
| Function: | This mapping macro maps the RACF® user security token and the RACF resource security token. |
| Offsets | |||||
|---|---|---|---|---|---|
| Dec | Hex | Type | Len | Name
(Dim) |
Description |
| 0 | (0) | STRUCTURE | 80 | TOKEN | UTOKEN/RTOKEN mapping element |
| 0 | (0) | UNSIGNED | 1 | TOKLEN | UTOKEN / RTOKEN length |
| 1 | (1) | UNSIGNED | 1 | TOKVERS | UTOKEN / RTOKEN version # |
| 2 | (2) | BITSTRING | 1 | TOKFLG1 | miscellaneous flags |
|
TOKENCR | Set to '1'B if the token is in an internal format (masked) and set
to '0'B (external format) if it is not. TOKENCR must be set correctly regardless of the format of
the token (internal or external).![]() |
|||
|
* | reserved | |||
|
TOKLT19 | Token created by pre-1.9 RACF call | |||
|
TOKVXPRP | VERIFYX propagation flag | |||
|
TOKUNUSR | NJE unknown user | |||
|
TOKLOGU | log user indicator | |||
|
TOKRSPEC | RACF special indicator | |||
|
* | reserved | |||
| 3 | (3) | UNSIGNED | 1 | TOKSTYP | session type, defined below |
| 4 | (4) | BITSTRING | 1 | TOKFLG2 | miscellaneous flags |
|
TOKDFLT | default token | |||
|
TOKUDUS | undefined user | |||
|
* | reserved | |||
|
TOKERR | token in error | |||
|
TOKTRST | part of trusted comp base | |||
|
TOKSUS | surrogate user ID | |||
|
TOKREMOT | remote job indicator | |||
|
TOKPRIV | privileged indicator | |||
| 5 | (5) | UNSIGNED | 1 | TOKPOEX | port of entry class index |
| 6 | (6) | CHARACTER | 2 | reserved for expansion | |
| 8 | (8) | CHARACTER | 8 | TOKSCL | SECLABL |
| 16 | (10) | CHARACTER | 8 | TOKXNOD | execution node |
| 24 | (18) | CHARACTER | 8 | TOKSUSR | submitting user IDD |
| 32 | (20) | CHARACTER | 8 | TOKSNOD | submitter node |
| 40 | (28) | CHARACTER | 8 | TOKSGRP | submitting group ID |
| 48 | (30) | CHARACTER | 8 | TOKPOE | port of entry (console ID, terminal ID) |
| 56 | (38) | CHARACTER | 8 | * | reserved for expansion |
| 64 | (40) | CHARACTER | 8 | TOKUSER | user ID |
| 72 | (48) | CHARACTER | 8 | TOKGRUP | group ID |
Set to '1'B if the token is in an internal format (masked) and set
to '0'B (external format) if it is not. TOKENCR must be set correctly regardless of the format of
the token (internal or external).