6.7.3 Unified logon exit (ARSPTGN): z/OS only An exit routine must be eligible for execution by associating a logical exit point  ( ARS.SECURITY ). In this example, the MVS Dynamic Exit Facility provides several methods to  perform this association. You can use the  PROGXX  statement in Sys1.Parmlib to define exits to  the Dynamic Exit Facility at IPL time (Exit statement for  PROGXX ). The following example shows the exit statement for  PROGXX : EXIT ADD EXITNAME(ARS.SECURITY) MODNAME(ARSUSECZ) In addition, you can use the following operator command to add the exit: SETPROG EXIT,ADD,EXITNAME=ARS.SECURITY,MODENAME=ARSUSECZ Important:  The load module must be in a link pack area (LPA) or an LNLKLST dataset. With the Content Manager OnDemand unified login exit ( ARS.PTGN ), you can run the Content  Manager OnDemand command-line utilities (such as  ARSLOAD ) without requiring a specified  user ID and password. This facility to log on without specifying a password specifies a PassTicket as a password  when you use a  RACROUTE REQUEST=VERIFY  call. Figure 6-13 shows the unified logon exit.  CMOD in the figure stands for Content Manager OnDemand. To enable PassTicket in a security manager, such as RACF, you must complete the following  steps: Figure 6-13 Unified logon exit 1. Activate the PKTDATA class. 2. Define a secured sign-on application key for each application. 156  IBM Content Manager OnDemand Guide 3. Run  SETROPTS RACLIST(PTKTDATA) . command line utility (ex. Arsload) If (no userID, pwd specified) then call USS MVS Dynamic Exit Facility ARSPTGN Security exit module assembler Optionally  mo dified  Logical exit point nameARS.PTGN  Setprogexit…..ARSPTGN … or Par mlib( PR OGx x. .) E XIT st at em ent racroute SAF RACF, ACF2, Top  Secret PassTicket Generated &  returned Utility logs on to server Performs function term inat es CMOD Server RACROUTE REQUEST=VERIFY USS command prompt: Security database