The job header security section contains information for identifying the owner or submitter user associated with the NJE job (SYSIN or SYSOUT). Treat information as a token to be interpreted by the security facility component of the trusted computer base.
Identified by an identifier field of X’8C’ and a modifier field of X’00’. Can be built as part of a created NJE work element (job or SYSOUT) or added to a forwarded work element.
NJHTLENP - Length of prefix subsection
NJHTFLG0 - Flag byte
NJHTF0JB - NJE job owner
NJHTVERS - Version
NJHTFLG1 - Flag byte
NJHT1EN - Security section is encrypted
NJHT1EXT - Security section format
NJHTSNRF - Sent without RACF v 1.9
NJHTSTYP - Security session type
NJHTFLG2 - Flag byte
NJHT2DFT - Not verified data
NJHTUNRF - Undefined user without RACF v 1.9
NJHT2MLO - Active multiple leaving options
NJHT2SHI - Could not verify security data
NJHT2TRS - Trusted user
NJHT2SUS - Surrogate user
NJHT2RMT - Remote job or data set origin
NJHTPOEX - Port of entry class
NJHTSECL - Security label
NJHTCNOD - Security node
NJHTSUSR - Submitter's user ID
NJHTSNOD - Job submission node
NJHTSGRP - Submitter's group ID
NJHTPOEN - Originator node name
NJHTOUSR - Owner user ID
NJHTOGRP - Owner group ID
Prefix subsection's length. You cannot change the value for this field.
Type and range: 2 binary (4-32764)
Default value: 4
Flag byte.
Length and type: 1 byte
Default value: 0
Contains this bit:
Security section represents the NJE job owner. Bit not set indicates the NJE job submitter.
Type: bit 80
Default value: 0
Security section version.
Length, type, and range: 1 binary (1-255)
Default value: X'01'
Flag byte.
Length and type: 1 byte
Default value: 0
Contains these bits:
NJHT1EN - Security section is encrypted
NJHT1EXT - Security section format
NJHTSNRF - Sent without RACF v 1.9
Indicates security section (from NJHTSTYP on) is encrypted. Encryption algorithm is private to the security product.
Type: bit 80
Default value: 0
Indicates security section format. B'1' indicates external format used exclusively in NJE.
Type: bit 40
Default value: 1
Indicates that the data set was sent from a system without RACF version 1.9.
Type: bit 20
Default value: 1
Security session type. A 7 indicates batch job type.
Length, type, and range: 1 binary (1-255)
Default value: X'07'
Flag byte.
Length and type: 1 byte
Default value: none
Contains these bits:
NJHT2DFT - Not verified data
NJHTUNRF - Undefined user without RACF v 1.9
NJHT2MLO - Active multiple leaving options
NJHT2SHI - Could not verify security data
NJHT2TRS - Trusted user
NJHT2SUS - Surrogate user
NJHT2RMT - Remote job or data set origin
Indicates that the security section product has not verified data at the node that created the security section. If not set, you can assume that the security data was verified.
Type: bit 80
Default value: 1
Indicates that an undefined user that does not have RACF version 1.9 sent the data set.
Type: bit 40
Default value: 1
Indicates required multiple leaving options were active at the node that created the security section.
Type: bit 20
Default value: 0
Indicates security data could not be verified at the node that created the security section.
Type: bit 10
Default value: 0
If set, you can consider the user to which this section applies a part of the trusted computer base.
Type: bit 8
Default value: 0
If set, the security data was obtained with a surrogate user at the node of creation.
Type: bit 4
Default value: 0
Indicates the job or data set originated remotely.
Type: bit 2
Default value: 1
Indicates the port of entry class index. The following are defined:
1= Terminal Class
2= Console Class
3 = JESINPUT Class
Field, type, and range: 1 binary (1-255)
Default value: X'03'
Security label associated with the user represented by this section.
Field, type, and range: 8 character (A-Z, 0-9)
Default value: none
Node at which security section was generated.
Length, type, and range: 8 characters (A-Z, 0-9)
Default value: 0
Submitting user's user ID.
Length, type, and range: 8 character (A-Z, 0-9)
Default value: none
Job submission node.
Length, type, and range: 8 character (A-Z, 0-9)
Default value: none
Submitting user's group ID.
Length, type, and range: 8 character (A-Z, 0-9)
Default value: none
Port of entry name at this job's creation node.
Length, type, and range: 8 character (A-Z, 0-9)
Default value: none
Security session owner's user ID.
Length, type, and range: 8 character (A-Z, 0-9)
Default value: none
Security session owner's group ID.
Length, type, and range: 8 character (A-Z, 0-9)
Default value: blanks