Chapter 3. Operating NetView FTP V2.2.1 MVS - IBM

This approach of creating a temporary SAF environment has the following advantages:
� You can define new data sets to the SAF product using the authority of the
user who created the receiving data set.
� The servers themselves do not have to have access rights for the data sets
that are involved in a transfer. This makes NetView FTP V2.2.1 MVS easier to
install and protects it from misuse.
NetView FTP V2.2.1 MVS uses the RACROUTE macroinstruction to create a temporary
SAF environment. For the APPL parameter the RACROUTE macro supplies
the string DVGFTP. This string is made available to installation exit routines. For
more information on the RACROUTE macro refer to the following:
� MVS/Extended Architecture System Programming Library: System Macros and
Facilities, Volume 2
� MVS/Extended Architecture Supervisor Services and Macro Instructions.
If you use NetView FTP V2.2.1 MVS’s dynamic data security function, you can
specify, in the file-transfer request, a user ID, password, and a group ID security
parameter for both the sending and the receiving data sets. Under certain circumstances
NetView FTP V2.2.1 MVS automatically retrieves the request originator’s
password and default connect group from the installed SAF product. NetView FTP
V2.2.1 MVS uses either the specified or retrieved security parameter values to gain
access to the data sets. The retrieved parameters can be used on the remote
system, for instance if the request originator has identical user IDs and passwords
on both systems. The NetView FTP Parameter Reference describes how to specify
these parameters, and when NetView FTP V2.2.1 MVS automatically retrieves
them.
NetView FTP V2.2.1 MVS encrypts the passwords as soon as they are read in.
This ensures that the passwords are encrypted before they are transferred across
the network and are not visible in a dump.
You can use the SECPAR server initialization parameter to specify whether or not
the server automatically rejects all requests for which SAF security parameter
values do not exist. Automatic rejection is the default value for SECPAR.
The SECPAR server initialization parameter can be used to prevent requests being
processed that do not contain security parameters. Additionally, this parameter
controls whether or not the transfer program uses the request originator’s security
parameters or the security parameters specified in the request. For further information
on the SECPAR parameter, refer to Security Parameters on page 121.
Note: In a request, you can specify xSECURP=‘*’ for the sending and the
receiving system. This is useful if both the local and the remote system have the
same SAF environment.
The originator of the file-transfer request can give access authorization to the
server. In this case, the server runs under the authorization of the user ID specified
in the file-transfer request.
Appendix A. Data Integrity and Data Security 181