CICS Transaction Gateway V5 The WebSphere ... - IBM Redbooks

6.2.2 ECI to CICS TG for Windows (TCP/IP)
112 CICS Transaction Gateway V5
In this example we show you how we configured security to allow an ECI-based
Java application to make an authenticated call to CICS using the facilities of the
CICS TG for Windows, using a TCP/IP connection to our CICS TS V2.2 region
(Figure 6-4).
As in the previous example, we used the supplied sample EciB1, and the CICS
server program, EC01, in our test. The aim of our test was to permit the user ID
CICSRS2 access to the EC01 program and deny access to the user CICSRS5.
Windows client
Java
application
EciB1
Port
2006
Windows NT
volga
CICS TG V4.0.2
Gateway
daemon
Client
daemon
Figure 6-4 ECI to CICS TG for Windows, security scenario
JNI
ECI request
TCP/IP
user ID +
password
TCPIP
service
z/OS
CICS TS V2.2
Region
SCSCPAA6
EC01
program
RACF
TCP/IP security configuration
When using TCP/IP connections to CICS, the CICS TG provides support for the
flowing of a user ID and password within the ECI request, for authentication of
this user ID and password within CICS, and authorization of requests using
RACF. In the instructions that follow, we detail how we configured security in our
CICS region and CICS TG.
Basic CICS TG configuration
In this section, we assume that you have already installed the CICS TG for
Windows and configured a TCP/IP connection from the CICS TG to CICS TS
V2.2. For further details on how to configure TCP/IP connections, refer to
Chapter 5, “TCP/IP connections to CICS” on page 81.