Re: REQUEST=FASTAUTH exit routine: any experience with the ICHRFXyy exit's complex environmental conditions?

2010-03-25 Thread Binyamin Dissen
On Thu, 25 Mar 2010 18:40:03 +0100 "Dr. Stephen Fedtke"
 wrote:

:>if you read the environmental conditions of the ICHRFXyy FASTAUTH exits, it
:>seems to be a tough job to escape in an environment that allows you to
:>perform some critical activity requiring authorization and similar. the book
:>says:

:>
:>Its running environment offers limited function as indicated in the
:>following list:  
:>The execution key is unpredictable.  
:>The exit might receive control in either supervisor or problem state.  
:>The exit might or might not be given control APF-authorized.  
:>The exit might be given control in SRB mode; that is, the REQUEST=FASTAUTH
:>might have been issued by a caller running as an SRB.  
:>The exit should not issue any SVCs.  
:>The exit routine might be given control in either 24- or 31-bit mode.
:>
:>does anybody have experience in programming ICHRFXyy exits, or knows any
:>"alternative"?

Why do you need this exit?

If you know which resource, it may be that you are always called unlocked in
TCB mode so no special considerations are required.

--
Binyamin Dissen 
http://www.dissensoftware.com

Director, Dissen Software, Bar & Grill - Israel


Should you use the mailblocks package and expect a response from me,
you should preauthorize the dissensoftware.com domain.

I very rarely bother responding to challenge/response systems,
especially those from irresponsible companies.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


REQUEST=FASTAUTH exit routine: any experience with the ICHRFXyy exit's complex environmental conditions?

2010-03-25 Thread Dr. Stephen Fedtke
hi all,

thanks to all for replying on my last question. i would have one further:

if you read the environmental conditions of the ICHRFXyy FASTAUTH exits, it
seems to be a tough job to escape in an environment that allows you to
perform some critical activity requiring authorization and similar. the book
says:


Its running environment offers limited function as indicated in the
following list:  
The execution key is unpredictable.  
The exit might receive control in either supervisor or problem state.  
The exit might or might not be given control APF-authorized.  
The exit might be given control in SRB mode; that is, the REQUEST=FASTAUTH
might have been issued by a caller running as an SRB.  
The exit should not issue any SVCs.  
The exit routine might be given control in either 24- or 31-bit mode.


does anybody have experience in programming ICHRFXyy exits, or knows any
"alternative"?

many thanks!

best
stephen


---
Dr. Stephen Fedtke
Enterprise-IT-Security.com

Seestrasse 3a
CH-6300  Zug
Switzerland
Tel. ++41-(0)41-710-4005
www.enterprise-it-security.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html