This document describes the steps for installing Natural SAF Security (product code NSF) on z/OS.
For information on the features and functions provided by Natural SAF Security, see the Natural SAF Security documentation.
When used in this document, the notation
vrs
or
vr
represents the relevant product
version (see also Version in the
Glossary).
Supported versions of the following products must be installed before you can install Natural SAF Security:
Adabas
Adabas Limited Libraries
SAF-compliant security system
See also General Prerequisites and System Support in the section Overview of the Installation Process.
The installation medium contains the following data sets required for product installation:
Data Set | Contents |
---|---|
NSFvrs.LOAD |
Load modules |
NSFvrs.INPL |
Natural objects |
Copy the data sets into your environment as described in Copying Data Sets to a z/OS Disk in the section Installing Natural.
Sample installation jobs are contained in the NATvrs.JOBS
data set
and are prefixed with the product code. The data set is provided on the
installation medium supplied for base Natural.
Be sure to read Installation Process and Major Natural Features before you start the installation procedure.
(Job I005)
Load the Natural objects specific to Natural SAF Security from the
NSFvrs.INPL
data set into the
appropriate Natural libraries in your FNAT
system file by using
the Natural INPL utility.
(Job I060, Step 0010)
Build the Natural parameter module. The parameters and macros mentioned in this section are described in the Parameter Reference documentation.
Specify the following with the
NTDS
macro:
NTDS NSFSIZE,8
8 KB is the minimum NSFSIZE
value. Depending on your
usage of Natural SAF Security, a higher value may be required, which can be
calculated as follows:
4 KB + (e * 17 bytes) +
((p + r) * 8
bytes)
, rounded up to the next KB
where:
e
is the number of
protected environments,
p
is the number of
protected Natural objects,
r
is the number of
protected RPC services.
You can also use the dynamic profile parameter
DS
to specify
NSFSIZE
at the start of a Natural session:
DS=(NSFSIZE,8)
If you want to use Natural SAF Security to control the execution of
Natural objects, specify the following in the
NTRDC
macro of the Natural parameter module:
NTRDC SIZE=2,EXIT=(RDCEX3,2000)
You can also use the corresponding dynamic profile parameter
RDC
to
specify the parameter at the start of a Natural session:
RDC=(SIZE=2,EXIT=(RDCEX3,2000))
Note:
If this feature is used, you have to either link the Natural SAF
Security module NSFNUC
to the Natural parameter module or to the
nucleus (in the case of an environment-independent nucleus, to the
environment-independent part).
Assemble and link the Natural parameter module.
(Job I060, I080)
Adapt the link steps for Natural:
Add the following INCLUDE
statement to the link of the
nucleus to include Natural SAF Security modules:
INCLUDE NSFLIB(NSFNUC)
If you are using a shared nucleus, include this statement in the link of the shared part.
Add the corresponding DD statement:
//NSFLIB DD DSN=NSFvrs.LOAD,DISP=SHR
Relink your nucleus as described in Link the Nucleus in Installing Natural.
The SAF server (SAF Security Kernel) is delivered with Adabas Limited Libraries.
Install and configure the SAF server and its associated Daemon as described in the SAF Security Kernel documentation.
You may have to set the following Natural SAF Security options in the configuration module of the SAF server:
- Number of Cached Resource Checks
Natural SAF Security allows you to have resource checks cached. If you want resource checks to be cached, you have to specify the number of successful resource checks to be cached for each resource class using the following parameters of the configuration module:
Parameter Default Value Function NANUSF
0
Number of cached environment checks NANUTC
0
Number of cached library checks NANURP
0
Number of cached RPC service checks - Alternate Resource Names
If you want to change the default names for the resource classes, you have to change the following parameters of the configuration module:
Parameter Default Value Function NACLSF
SAGNSF
Resource-class name for environments NACLTC
SAGNTC
Resource-class name for libraries NACLPG
SAGNPG
Resource-class name for Natural objects NACLRP
SAGNRP
Resource-class name for RPC services NACLAP
SAGNRP
Resource-class name for user-defined resources
Natural SAF Security is operational after Step 4: Install the SAF Server of the Installation Procedure has been completed successfully.
After the installation, proceed as described in Activating Natural SAF Security in the Natural SAF Security documentation.