How to: Use KOBSUPDT security exits with PARMGEN

When using a PARMGEN configuration, you can use KOBSUPDT OMEGAMON security command table exits for the PARMGEN KCIJPSEC composite security job.

1. If the RTE_X_SECURITY_EXIT_LIB parameter in the RTE configuration profile is pointing to RKANSAM (the original default), change it to point to the appropriate library. The new default is RKANSAMU.

   This global security exit data set is allocated by the KCIJPALO allocation job. The RTE_X_SECURITY_EXIT_LIB parameter defaults to the RKANSAMU library of the runtime environment, because this is where the KCIJPLOD job copies all the product security exits, including KppSUPDI.

   In this example, IBM.ITM62351.LPAR1.SECURITY is the RTE_X_SECURITY_EXIT_LIB value, as shown in line 536 of the following example.

   EDIT   IBM.ITM62351.LPAR1.WCONFIG(LPAR1)
   Command ===>
   000524 ** Library where user security exits are located:
   000525 ** Override the SYSIN DD where the user exits may have been
   000526 ** customized (if other than default RKANSAM location).
   000527 ** The KppJPSC3 input members to the composite KCIJPSEC security job
   000528 ** point SYSIN DD to RKANSAM by default. If you need to make further
   000529 ** changes to sample exit, copy the user exit to xKANSAMU library and
   000530 ** make changes accordingly. Then modify the RTE_X_SECURITY_EXIT_LIB
   000531 ** parameter and change the value to RKANSAMU instead.
   000532 ** ICAT->PARMGEN conversion considerations:
   000533 ** If this is an ICAT RTE conversion, the security exit source
   000534 ** library varies for each product. Please refer to the
   000535 ** application-specific security jobs for more information.
   000536 RTE_X_SECURITY_EXIT_LIB IBM.ITM62351.LPAR1.SECURITY

2. Run the $PARSE or $PARSESV job to recreate the runtime members and update the jobs.
3. Submit the following jobs from the Submit Batch Jobs to Complete PARMGEN Setup panel (KCIP@SUB):
   1. If you changed the name of the library, rerun KCIJPALO.
   2. Run the KCIJPLOD job.
4. Select option 4 (KCIJPSEC).
   The following message is displayed:

   
    ----------------------------- PARMGEN MESSAGES ----------------------------- 
    Command ===>                                                                 
                                                                                 
    You are about to run the security job. Before editing the                    
    security job, you will first be given an opportunity to edit                 
    the security exits in lib TSTEST.&username.PLB1SP22.RKANSAMU.                
    If desired, customize the security exits.                                    
   _______________________________________________________________________________

5. Press Enter to proceed.
6. Select the exits you want to edit, and customize them as appropriate.
   For example, if they have not already been customized, edit the RACF-related or ACF2-related external security exits to point to the preferred resource class if other than the IBM-supplied default. If not already customized, edit the applicable KppSUPDI KOBSUPDT security exits to point the MODULE= parameter to your external security module. (See the columns labeled External Security MODULE Referenced in KOBSUPDT Exit Name in Table 1).
7. After you finish making the changes, press F3.
   The modified KCIJPSEC job is presented.
8. Submit the job.
9. Submit the KCIJPW2R job to copy the work libraries (WK*) to the production libraries (RK*).