Authorizing work from remote job entry (RJE) workstations

Operators at RJE workstations must issue either a /*SIGNON (if BSC) or a LOGON (if SNA) statement before JES2 establishes a session with the remote. In RACF®, the administrator defines the workstation ID used in the /*SIGNON statement in a profile name in the FACILITY class. When properly defined, this allows the remote access to your system. For example, the profile name for a workstation with the ID RMT1 is:

RJE.RMT1

The administrator must also define the remote workstation as a valid RACF userid for RACF to control the signon process and any commands from the remote.

JES2 passes the workstation ID and the password specified to RACF for userid validation during signon processing. RACF requires the password be present during signon processing for all remote workstations it controls. If RACF is active, RACF performs the userid validation for the remote. If RACF is not active, JES2 performs the userid validation for the remote using the line and remote password specified in the JES2 initialization stream or set by the system operator. The UACC of the remote should be READ.

The password for an RJE workstation must be changed the first time the workstation issues a logon or signon. Otherwise, RACF will reject the access attempt.