Determining PTKTDATA profile names
- An application name only
- An application name appended (or qualified) by a RACF® connect group name
- An application name qualified by a RACF user ID
- An application name qualified by both a RACF connect group name and a RACF user ID.
When the profile name consists of the application name and one or two qualifiers, the qualifiers are separated by a period. When a RACF connect group name and a RACF user ID are used as qualifiers, the group name must be appended to the application name and the user ID must be appended to the group name.
- An application name concatenated with a RACF group name and user ID: TSO1234.SYS1.IBMUSER
- An application name concatenated with a RACF user ID: TSO1234.IBMUSER
- An application name concatenated with a RACF group name: TSO1234.SYS1
- An application name: TSO1234
When PassTicket generation is done by the RACF secured signon PassTicket generation service, only profiles with name structure 4, the unqualified application name, are used. All other name structures are ignored.
- Assuming there is at least one qualified profile, RACF selects one qualified profile name according
to the precedence shown in the previous list (items 1, 2, and 3).
The first qualified profile found using this search precedence is selected and RACF evaluates the PassTicket using this key. Any other profiles with qualified names are ignored.
- If no qualified name is found, or the evaluation using the key within the qualified profile is not successful because the key is not correct, RACF searches for a profile using only the application name. If such a profile exists, RACF evaluates the PassTicket using the key contained within this profile.
Depending on the application (APPC, CICS®, IMS™, MVS™ batch, TSO, or VM), the secured signon function uses a specific method for determining profile names in the PTKTDATA class. If your application is other than those listed, see Other applications.
For example, if the ICHRIX01
exit places the character string TSO1234
in the application
name position of the exit parameter list, the application name position
of the PTKTDATA class profile must also be TSO1234
.