These Release Notes apply to Adabas SAF Security Version 8.3.1. Read this document carefully before installing and using this version of Adabas SAF Security.
Adabas SAF Security (ADASAF) provides protection of Adabas resources using standard security packages in a z/OS operating system environment based on the System Authorization Facility (SAF). These security packages include RACF, Top Secret, and ACF2.
| Prerequisites: See SAF Security Install documentation, section Prerequisites. |
| New Features |
| Enhancements |
| Discontinued Support |
| Upgrading from Earlier Versions |
| Documentation and Other Online Information |
This section provides an overview of new features for Adabas SAF Security Version 8.3.1
Starting with version 8.3 SP1, Adabas SAF Security requires an associated license file for Operation in the Adabas Nucleus and Operation in Entire Net-Work.
Note:
If the Adabas SAF Security license file is not available or
erroneous, the job/started task may terminate.
For further information regarding the new license requirements, refer to the section License.
For installation information regarding the new license requirements, refer to the section Installation Procedure.
For general information on Adabas licensing procedures, license check software and license files, refer to the Software AG Mainframe Product Licensing topic in the Adabas for Mainframes documentation.
Adabas SAF Security provides protection for Entire Net-Work administration functions ensuring unauthorized use of such functions is not permitted.
In previous versions of Adabas SAF Security, this protection was available for operator commands issued from the console and/or Entire Net-Work’s Programmable Command Interface.
With version 8.3 SP1 of Adabas SAF Security, this protection is now available when Adabas Manager is used to perform Entire Net-Work administration.
For further information regarding the protection of Entire Net-work administration functions using Adabas SAF Security, refer to the section Operation in Entire Net-Work.
Adabas SAF Security can now be configured to perform its
authorization checking using RACROUTE REQUEST=FASTAUTH
instead of RACROUTE REQUEST=AUTH.
The use of RACROUTE REQUEST=FASTAUTH provides
a fast path mechanism which enables the verification of access to resources
that have security profiles brought into storage by the RACROUTE
REQUEST=LIST macro service.
The use of RACROUTE REQUEST=FASTAUTH also
reduces the number of security-related zIIP switches for Adabas nuclei and
Entire Net-Work nodes running with ADARUN ZIIP=YES.
Refer to the SAFCFG parameters
DBCLASS
and NWCLASS
for information on how to configure the use of this option.
Note:
This new FASTAUTH feature requires Adabas
Limited Library (WAL) version 8.5 SP3 or above.
Adabas SAF Security Version 8.3.1 incorporates all fixes to previous versions and provides the following enhancements.
The new SAFCFG parameter ALLFILES=N/Y
controls whether security checks, performed for each individual client session,
are at the file level or at the database ("all files") level.
ALLFILES=N, the default, has no effect on the
current behavior of performing client session security checks and maintaining
cache data and statistical information for each file accessed and updated.
ALLFILES=Y changes the current behavior so
that client session security checks are performed only once at first file
access and first file update. If the client session’s first file access/update
is permitted, then all subsequent access/updates to other files are also
permitted without the need to perform further security checks.
Refer to the SAFCFG configuration parameter
ALLFILES
for more information.
Note:
The use of the new SAFCFG parameter
ALLFILES=N/Y requires Adabas Limited Library (WAL)
version 8.5 SP3 or above.
The SAFCFG parameter SAFPRINT
enables security check trace messages to be written to DD
SAFPRINT instead of DD DDPRINT.
In the previous version, the use of DD SAFPRINT would result in an
increase in zIIP switches for Adabas nuclei and Entire Net-work nodes running
with ADARUN ZIIP=YES. With version 8.3, Adabas SAF
Security now provides the same zIIP switching efficiencies with DD
SAFPRINT as it does with DD DDPRINT.
Note:
This zIIP switching optimization requires Adabas Limited Library
(WAL) version 8.5 SP3 or above
None.
Refer to Upgrading from Earlier Versions in the main documentation for an overview regarding the upgrading of Adabas SAF Security.
The following online resources are available for you to obtain up-to-date information about your Software AG products:
You can find documentation for all Software AG products on the Software AG Documentation website at https://documentation.softwareag.com. This site requires Empower credentials. If you do not have an Empower user ID and password yet, you will find instructions for registering on this site (free for customers with maintenance contracts) or you can also use the TECHcommunity website to access the latest documentation.
You can find documentation and other technical information on the Software AG TECHcommunity website at http://techcommunity.softwareag.com. You can:
Access product documentation, if you have TECHcommunity credentials. If you do not, you will need to register and specify "Documentation" as an area of interest. If you already have TECHcommunity credentials, you can adjust your areas of interest on the TECHcommunity website by editing your TECHcommunity profile. To access documentation in the TECHcommunity once you are logged in, select Documentation from the Communities menu.
Access articles, demos, and tutorials.
Use the online discussion forums, moderated by Software AG professionals, to ask questions, discuss best practices, and learn how other customers are using Software AG technology.
Link to external websites that discuss open standards and web technology.
You can find product information on the Software AG Empower Product Support website at https://empower.softwareag.com. This site requires Empower credentials. If you do not have an Empower user ID and password yet, you will find instructions for registering on this site (free for customers with maintenance contracts).
To submit feature/enhancement requests, get information about product availability, and download products and certified samples, select Products & Documentation from the menu once you are logged in.
To get information about fixes and to read early warnings, technical papers, and knowledge base articles, select Knowledge Center from the menu once you are logged in.