Thanks for the info, Walt. I sit corrected<G>

<snip>
On Fri, 30 May 2014 20:22:29 +0000, Staller, Allan <allan.stal...@kbmg.com> 
wrote:

>I believe ACF2 is started as a subsystem. I know RACF is.  Look in 
>SYS1.PARMLIB(IEFSSN**).

RACF -has- a subsystem, Allan, but it is not part of the basic security 
processing (RACROUTE REQUEST=VERIFY, AUTH, DEFINE, etc.) done by RACF. It is 
used for other things. The basic security processing done by SAF and RACF 
occurs in each address space that needs it.

IEEMB860 (part of Master Scheduler Initiation) attaches the RACF initialization 
module shortly after SMF initializes. A few years ago IBM implemented a similar 
mechanism to allow CA or other security vendors to also start around that same 
time during MSI.

However, only CA can tell anyone what mechanism(s) they actually use, and 
anyone wanting to know how a CA product operates really should ask CA.
</snip>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to