IMS Version 9

/SIGN

Format

Read syntax diagramSkip visual syntax diagram                .-ON-.
>>-+-/SIGN-+--+-+----+--userid--| A |-+------------------------><
   '-/SIG--'  '-OFF-------------------'

A:

|--+-----------------+--+------------+--+----------------+------>
   '-USERD--userdesc-'  +-userpw-----+  '-APPL--applname-'
                        '-PassTicket-'

>--+------------------+----------------------------------------->
   '-GROUP--groupname-'

>--+-------------------------------------+--+----------+--------|
   '-NEWPW--nuserpw--+-----------------+-'  '-userdata-'
                     '-VERIFY--nuserpw-'

Environments

Table 150 lists the environments (DB/DC, DBCTL, and DCCTL) from which the command can be issued.

Table 150. Valid Environments for the /SIGN Command
Command DB/DC DBCTL DCCTL
/SIGN X X

Usage

The /SIGN command is used to sign on and sign off at terminals attached to IMS. This command enables IMS to identify who is using the terminal and to determine if you are authorized to enter the transaction or command.

When SGN=G, Z, or M is specified, the user can sign on multiple times to both STATIC and ETO terminals when the structure name is different from the user ID.

The status fields of /DISPLAY NODE and /DISPLAY LINE PTERM indicate whether a terminal is signed on with the word SIGN.

ON
/SIGN ON must be issued for any physical terminal or user ID requiring a signon, or the transaction entered is rejected.

From terminals that require signon, commands other than /SIGN or /RCLSDST are rejected if transaction authorization is requested. Static terminals requiring a signon also have enhanced command authorization with RACF or an equivalent product if RCF=S or RCF=A is specified at system startup.

At terminals not requiring signon, transactions are passed to RACF, an equivalent security product, or a user exit for authorization checking. If /SIGN ON is entered at a terminal not requiring a signon, the signon is processed as if the terminal required a signon. That is, the terminal is placed in a signed on status with the user ID until a /SIGN OFF or another /SIGN ON command is entered. For switched terminals, the /IAM command must be issued before the /SIGN ON command.

After any IMS restart or terminal disconnect, the remote terminal operator is required to sign on again using the /SIGN ON command. A terminal can be disconnected by:

Signon status is also reset by the /START LINE, /START LINE PTERM, and /START NODE commands and auto signoff.

The remote terminal operator must wait at a static physical terminal for confidential responses, because responses queued for a given physical terminal are sent even if the physical terminal is signed off. If the remote terminal operator must be absent, the /LOCK command can be used to prevent output from being received. Confidential output sent to a dynamic user is queued to the user instead of to the physical terminal when the user has signed off. A successful signon of an existing user turns off the DEADQ status for the user, if that status exists.

APPL
A keyword that notifies IMS that the following character string should be the application name used by IMS when IMS makes the SAF call to verify the user. The default application name used by IMS is the IMSID. The IMSID can be overridden by the SAPPLID= parameter in the IMS PROCLIB member DFSDCxxx. If the signon specifies a PassTicket instead of a password, the APPL parameter should specify the application name used when the PassTicket was created. The creator of the PassTicket can specify any value to identify an IMS subsystem.

If RACF is used, APPL= should specify the name of the RACF PTKTDATA profile for IMS as defined to RACF by the creator of the PassTicket. If the name of the PTKTDATA profile is the same as the IMSID, the APPL keyword is not needed. For more information on the RACF secured signon PassTicket, see the RACF Macros and Interfaces manual. For more information on using the secured signon function, see the RACF Security Administrator's Guide.

GROUP
Is an optional keyword indicating a group name of 8 characters or fewer that is associated with the user ID.
NEWPW
Is an optional keyword indicating a new user password of 8 characters or fewer that replaces the current user password specified in userpw.
nuserpw
Is a new password of 8 characters or fewer that is associated with the user identification.
PassTicket
A one-time password that is generated by a requesting product or function. The PassTicket is an alternative to the RACF password. Using a PassTicket removes the need to send RACF passwords across the network in clear text.
USERD
Is a user descriptor name. This user descriptor name is used in the sign on. The userdesc parameter must be a user ID, node name or DFSUSER.
userdata
Is user identification information that has been defined to IMS with the (RACF), equivalent security product or the user exit routine, DFSCSGN0. For RACF, this information consists of the following:
    userpw  GROUP groupname   NEWPW nuserpw
userid
Is a user identification of 8 characters or fewer.
userpw
Is a password of 8 characters or fewer that is associated with the user identification.
VERIFY
Is an optional keyword that requests IMS to verify the new password entered. IMS verifies the new password before passing it to RACF or to the IMS signon exit routines. This keyword can also be used as an alternative to re-entering the password on the DFS3656 panel.

Restriction:  You can use this keyword only when responding to an IMS DFS3656A message and as an alternative to re-entering the password on the DFS3656 panel.

For the user exit routine DFSCSGN0, the user ID and userdata parameter values are defined by the installation.

OFF
The /SIGN OFF command is used to complete a session on a terminal that required a signon. Static terminals in conversational mode cannot be signed off without first issuing an /EXIT or /HOLD command.

Another method of signing off a terminal is to reenter the /SIGN ON command. This method initiates a new signon at the terminal without having to enter the /SIGN OFF command.

The /SIGN OFF command resets status that is not significant such as preset mode, test mode, response mode, lock lterm, pstop lterm, and purge lterm.

/SIGN OFF for ETO users will also take other actions depending on the recovery settings for the user:

RCVYCONV=NO
/SIGN OFF causes any IMS conversations (active and held) for an ETO user to be terminated. Any conversational message that is queued or being processed has its output response message delivered asynchronously.
RCVYFP=NO
/SIGN OFF cause s Fast Path status and messages for an ETO user to be discarded.

If global resource information is kept in Resource Manager, /SIGN OFF deletes the user ID from Resource Manager (if single user signon enforced) and resets status globally. If the user has no status, /SIGN OFF deletes the user and associated lterms from Resource Manager.

Examples

Example 1 for /SIGN Command

Entry ET:

 DFS3649A /SIGN COMMAND REQUIRED FOR IMS
 
 DATE: 11/03/92     TIME: 14:39:33
 
 NODE NAME: DT327001
 
 USERID: IMSUS01
 
 PASSWORD: IMSPW01
 
 USER DESCRIPTOR:
 GROUP NAME:
 NEW PASSWORD:
 
    OUTPUT SECURITY AVAILABLE

Response ET:

 DFS3650I SESSION STATUS FOR IMS
 
 DATE: 11/03/92     TIME: 14:41:48
 NODE NAME:           DT327001
 USERID:              IMSUS01
 PRESET DESTINATION:
 
 CURRENT SESSION STATUS:
 
    OUTPUT SECURITY AVAILABLE

Explanation: The user with user ID IMSUS01 and password IMSPW01 has successfully signed on to a dynamic terminal. The signon is done with the panel (DFS3649A).

Example 2 for /SIGN Command

Entry ET:

/SIGN IMSUS02 IMSPW02

Response ET:

 DFS3650I SESSION STATUS FOR IMS
 
 DATE: 11/03/92     TIME: 14:41:48
 NODE NAME:           DT327001
 USERID:              IMSUS02
 PRESET DESTINATION:
 
 CURRENT SESSION STATUS:
 
    OUTPUT SECURITY AVAILABLE

Explanation: The user with user ID IMSUS02 and password IMSPW02 has successfully signed on to a dynamic terminal. The signon is done with the /SIGN command.

Example 3 for /SIGN Command

Entry ET:

/SIGN IMSUS03 IMSPW03

Response ET:

 DFS3650I SESSION STATUS FOR IMS
 
 DATE: 11/03/92     TIME: 14:45:53
 NODE NAME:           L3270A
 USERID:              IMSUS03
 PRESET DESTINATION:
 
 CURRENT SESSION STATUS:
 
 NO OUTPUT SECURITY AVAILABLE

Explanation: The user with user ID IMSUS03 and password IMSPW03 has successfully signed on to a static terminal.

Go to the previous page Go to the next page

IBM Confidential

Downloads | Library | Support | Support Policy | Terms of use | Feedback
Copyright: IBM Corporation 1974, 2004 Copyright IBM Corporation 1974, 2004  timestamp Last updated: March, 2004