ODASI (40-byte bit string)

Alternate security identifier.

This is a security identifier that is passed with the ODAU to the authorization service to allow appropriate authorization checks to be performed. ODASI is used only if:

• OOALTU is specified on the MQOPEN call, or

• PMALTU is specified on the MQPUT1 call,

and the ODAU field is not entirely blank up to the first null character or the end of the field.

The ODASI field has the following structure:

• The first byte is a binary integer containing the length of the significant data that follows; the value excludes the length byte itself. If no security identifier is present, the length is zero.

• The second byte indicates the type of security identifier that is present; the following values are possible:

  SITWNT

  Windows security identifier.

  SITNON

  No security identifier.

• The third and subsequent bytes up to the length defined by the first byte contain the security identifier itself.

• Remaining bytes in the field are set to binary zero.

The following special value may be used:

SINONE

No security identifier specified.

The value is binary zero for the length of the field.

This is an input field. The length of this field is given by LNSCID. The initial value of this field is SINONE. This field is ignored if ODVER is less than ODVER3.