SAF Security in Tomcat

Issues and Questions related to running Apache Tomcat on z/OS
Post Reply
efichtenmayer
Posts: 1
Joined: Wed Dec 10, 2014 2:37 pm

SAF Security in Tomcat

Post by efichtenmayer » Tue Feb 03, 2015 9:37 am

Reading the documentation and in chapter 4 it reads, "The Tomcat address space must be "program controlled", which means that all of the load module libraries and DLLs that are loaded must be marked as program controlled. This is not the same as APF authorization, but is a system privilege required to check passwords and SAF entity access." I am not sure based on what i am reading, but do I need to make all the members/files in Tomcat/lib "Program Controled"? are there any other members/files within Tomcat that need to be made "Program Controled"?

Thanks for the Help
Ed

dovetail
Site Admin
Posts: 1781
Joined: Thu Jul 29, 2004 12:12 pm

Re: SAF Security in Tomcat

Post by dovetail » Tue Feb 03, 2015 4:17 pm

Steps 1 and 2 in this: http://dovetail.com/docs/tomcat/saf.html
shows how to make the DLLs and load module libraries program controlled.

Post Reply