Thanks for the info, Walt. I sit corrected<G> <snip> On Fri, 30 May 2014 20:22:29 +0000, Staller, Allan <allan.stal...@kbmg.com> wrote:
>I believe ACF2 is started as a subsystem. I know RACF is. Look in >SYS1.PARMLIB(IEFSSN**). RACF -has- a subsystem, Allan, but it is not part of the basic security processing (RACROUTE REQUEST=VERIFY, AUTH, DEFINE, etc.) done by RACF. It is used for other things. The basic security processing done by SAF and RACF occurs in each address space that needs it. IEEMB860 (part of Master Scheduler Initiation) attaches the RACF initialization module shortly after SMF initializes. A few years ago IBM implemented a similar mechanism to allow CA or other security vendors to also start around that same time during MSI. However, only CA can tell anyone what mechanism(s) they actually use, and anyone wanting to know how a CA product operates really should ask CA. </snip> ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN