156 IBM Content Manager OnDemand Guide
An exit routine must be eligible for execution by associating a logical exit point 
(ARS.SECURITY). In this example, the MVS Dynamic Exit Facility provides several methods to 
perform this association. Y ou can use the PROGXX statement in Sys1.Parmlib to define exits to 
the Dynamic Exit Facility at IPL time (Exit statement for PROGXX).
The following example shows the exit statement for PROGXX:
EXIT ADD EXITNAME(ARS.SECURITY)   MODNAME(ARSUSECZ)
In addition, you can use the following operator command to add the exit:
SETPROG EXIT,ADD,EXITNAME=ARS.SECURITY,MODENAME=ARSUSECZ
6.7.3  Unified logon exit (ARSPTGN): z/OS only
With the Content Manager OnDemand unified login exit (ARS.PTGN), you can run the Content 
Manager OnDemand command-line utilities (such as ARSLOAD) without requiring a specified 
user ID and password.
This facility to log on without specifying a password specifies a PassTicket as a password 
when you use a RACROUTE REQUEST=VERIFY call. Figure 6-13 shows the unified logon exit. 
CMOD in the figure stands for Content Manager OnDemand.
Figure 6-13   Unified logon exit
To enable PassTicket in a security manager, such as RACF , you must complete the following 
steps:
1. Activate the PKTDATA class.
2. Define a secured sign-on application key for each application.
3. Run SETROPTS RACLIST(PTKTDATA).
Important: The load module must be in a link pack area (LPA) or an LNLKLST dataset.
command line utility (ex. Arsload)
I f (no userID, pwd spec if ied) then
call
USS
MVS Dynamic Exit Facility  
ARSPTGN
Securit y exit module
as semble r
Optionally  
mo dif ied 
Log ical ex it point n ame ARS.PTGN 
Setprog exit…..ARSPTGN … or
Pa r ml i b ( PR O Gx x. .)  E XIT  st at em en t
racroute SAF
RAC F, ACF2, Top 
Secret
PassTicket
Generated
& 
returned
Ut ility logs on  to se rve r
Perf orms  f unc tion
te rm in at es
CMOD
Server
R ACR OU TE REQ UE ST=VER IF Y
USS comma nd promp t:
Security database