What's the difference between Standard and Enhanced Security when using CA Gen Direct Connect for CICS (CICS Sockets Listener)

Document ID : KB000056927
Last Modified Date : 12/02/2019
Show Technical Document Details
Introduction:

In summary, standard security validates user ID and password with a Gen z/OS user exit. Enhanced security validates user id and password with one or more customer designed programs on z/OS. The setup is the same whether using the Gen CICS Single (TISRVLIS  - TISL) or Multi Socket Server (TISRVMSL  - TIML).

Environment:
CA Gen Direct Connect for CICS - CICS Sockets Server Listener (TISRVLIS) or CICS Multi Sockets Server Listener (TISRVMSL)
Instructions:
Standard Security
The users logon with Client Manager or use a client logon program to capture attributes CLIENT_USER_ID and CLIENT_PASSWORD.  The user ID and password are placed in the front of the Common Format Buffer when using Client Manager.  The user ID and password are placed both in the front and at the end of the Common Format Buffer when using a client logon program. The client exit WREXITN.c must be changed to SecurityUsedStandard.  When passed to the Host, user exits check flags and capture the user ID and password to be validated by Gen.  

Enhanced Security
The variables CLIENT_USER_ID and CLIENT_PASSWORD are populated with a client written logon program.  The client exit WREXITN.c must be changed to SecurityUsedEnhanced.  Once this is passed to the host, user exits must be changed to validate security with custom code.  This custom program can be called from a Gen user exit to validate user ID and password as desired.  
 
Additional Information:
https://docops.ca.com/ca-gen/8-6/en/distributed-processing/working-with-distributed-processing/z-os-security/set-up-security-when-using-ca-gen-direct-connect-for-cics