Skip to Main Content
IBM Z Software


This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Delivered
Categories Runtime
Created by Guest
Created on Mar 15, 2013

Invoking RACF using an open TCB

We use an external security process through RACF. The identification process is not so quick enough to get a satisfactory flow regarding the way CICS invokes RACF. For issuing RACF calls, the RO TCB is always used. Due to the RO TCB uniqueness, tasks have to wait to be dispatched on this TCB. During peak hours users have to wait a very long time before having a successful signon, some of them receive a timed out message. This situation is specially critical when we should restart CICS during peak hours, all the users try to be reconnected…
To bypass this issue, we have multiply the number of TOR CICS in order to get multiple RO TCB.
We would like to promote an enhancement change such that RACF calls could be done using an open TCB.

Idea priority Medium
  • Guest
    Reply
    |
    Jun 12, 2017

    This is fixed by changes made in CICS TS 4.2 and above. Verify password can run on an open TCB and changes were made to utilise enhancements to RACF KDFAES functionality and shipped via apars PI64442, PI64443 and PI64175.

  • Guest
    Reply
    |
    Oct 5, 2015

    Due to processing by IBM, this request was reassigned to have the following updated attributes:
    Brand - Servers and Systems Software
    Product family - Transaction Processing
    Product - CICS Transaction Server

    For recording keeping, the previous attributes were:
    Brand - WebSphere
    Product family - Transaction Processing
    Product - CICS Transaction Server

  • Guest
    Reply
    |
    Mar 15, 2013

    The RO TCB is also responsible for doing directed program loads. In CICS TS 5.1 OE TCBs can do their own directed LOADs without queueing on the RO TCB. It therefore makes sense that the same ability should be added for RACF or SAF calls on the Open TCBs.