Authorization

The API uses RACF as the authentication system. Credentials should be provided using the Basic scheme in each request. Basic Authentication (Basic Auth) is a simple authentication scheme built into the HTTP protocol. It works by sending the user credentials — a username and password, separated by “:” — encoded in Base64 within the Authorization header of each HTTP request.

The configurator will prompt whether to have the RACF service case sensitive or not. If is set as case sensitive then credentials are passed to racf as is without modifying, allowing for use of passphrases up to 256 characters. If instead is set a non case sensitive, then both username and password are turned into uppercase characters, allowing for a password of at most 8 characters.

Errors and Workarounds

In the logs each call to RACF returns a 20 error code: This means that the service executable used to query RACF is not APF Authorized. In order to fix this problem you can run extattr +a bin/racfexec from your installation folder. To verify that the APF attribute is set, run ls -E bin/from the installation directory, and check that the a attribute is set.

If the attributes is set but still see missing APF authorization verify that the HFS where the API reside is mounted with the SETUID options set to true.