eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Lotus Notes Server(To RACF, these commands mark all programs in these libraries as"NOPADCHK". This means that any program-restricted data set accessshould not have to list any of the programs from these libraries. In otherwords, this marks all programs from these libraries as being trusted andtherefore exempt from any program accessed data set / PADS checks. Thesecommands are not applicable to eTrust CA-Top Secret.)6. Install steps, which discuss permission bits and the "sticky bit", are related toOMVS file security itself and are unrelated to RACF. Therefore, such stepsshould be followed as described.Lotus Notes ServerThe Lotus Notes Server (email) can run on a z/OS or OS/390 environment. Theexternal security interface requires a facility and a DOMINO console interface(identified in IBM as DOMCON). This interface facilitates sending commandsfrom z/OS or OS/390 to stop, start and manage Lotus Notes Server runningunder UNIX Systems Services.The Lotus Notes Server requires an acid for the server started task and a groupacid. The following commands accomplish this using the IBM default values.TSS CREATE(LOTUSGRP) TYPE(GROUP) NAME(LOTUSGROUP) DEPT(OMVSDEPT)TSS ADD(LOTUSGRP) GID(6789)TSS CREATE(DOMCON) TYPE(USER) NAME('LOTUS STC ACID') PASS(password,0)DEPT(OMVSDEPT) FACILITY(STC)TSS ADD(DOMCON) GROUP(LOTUSGRP) DFLTGRP(LOTUSGRP)TSS ADD(STC) PROCNAME(?????) ACID(DOMCON)The above command adding the stc should be done for all LOTUS PROCs. Therecan be multiple procs associated with this address space beginning with"DOMIN".TSS ADD(DOMCON) UID(0) HOME(/u/domcon) OMVSPGM(/bin/sh)TSS PERMIT(DOMCON) IBMFAC(BPX.DAEMON) ACCESS(READ)TSS ADD(DEPTACID) DSN(DOMCOM.WTO.LOAD)TSS PERMIT(DOMCON) DSN(DOMCOM.WTO.LOAD) ACCESS(READ)1–50 Cookbook