WEB Surrogate Acids named INTERNAL, PRIVATE, PUBLIC

[Tom Langan]

Hi all,

Long time TSS user and supporter, first time community user.

I hope all my previous contacts, team members, support teams are all doing well. 

I'm doing some acid remediation and find 3 acids named INTERNAL, PRIVATE and PUBLIC all have the name Web Surrogate ID. Internal and Private have no last used dates on any of 5 TSS databases. Public was heavily used until 2018 accessing a facility named IMWEB which I have no real info on. 

They don't have much access, have basic OMVS segments, home, omvspgm and uid and are connect to groups named External, Employee or Special. 

Created in 1998, long before my time at this shop. I do recall having them defined at my previous shop, but no real memory of why, what they are used for.

From the name, possibly WebSphere related, not sure.  

I'm working internally to see who may have knowledge of these acids and thought I'd ask if anyone have these defined or have knowledge of what they are used for, why or it they are needed or it they can be disabled then deleted with no impact. 

TSSUTIL report acid event(init) produces RC=04, 0 security events. I have cleanup, but it's only been active for a short period of time.

Appreciate any input.

Thanks All,

Tom Langan

    

#TopSecret

------------------------------
Tom Langan
------------------------------

[Jerry Scott]

Hi Tom

    IMWEB was likely the IBM Web Server from the OS/390 days. Most often used to serve up Book Manger books. I remember the 3 acids as being the example names used in the implementation instructions. This was prior to WebSphere being released. 

Alan Scott

-------------------------------------------

[Tom Langan]

Hi Alan,

Thanks for the reply

Tom 

-------------------------------------------