Permanently changing the configuration of the UIM server


The UIM server is configured during installation. However, you can permanently or temporarily change the configuration by changing the variable values in the startup and trace members of the configuration file. 

Each UIM server requires a configuration member, called the startup member. This member describes the unique characteristics of each server and is a parameter in the UIM server configuration file.

The sample library (hlq.SAMP) includes a member named #NORMAL, which is a template for the startup member. The installation process customizes #NORMAL, gives it the same name as the started task procedure, and copies it to the hlq.CONFIG data set.

The following figure shows the #NORMAL member template:

<BMCHTTP>
     <BMC_PARM ID="PORT" VALUE="3683" />
     <BMC_PARM ID="AUTH_TIMEOUT_SECS" VALUE="1800" />
     <BMC_PARM ID="AFF_TIMEOUT_SECS"  VALUE="1800" />
     <BMC_PARM ID="HFS_DATASET" VALUE="hlq.HFS" />
     <BMC_PARM ID="ALLOW_NETCMD" VALUE="YES" />
     <BMC_PARM ID="ENCRYPTION_LEVEL" VALUE="SSL-IF" />
     <BMC_PARM ID="USS_HFS_ROOT" VALUE="/tmp/bmcuim" />
     <BMC_PARM ID="SOCKET_REUSE_TIMEOUT" VALUE="300" />
     <BMC_PARM ID="TIMESTAMP_CLOCK_SKEW" VALUE="120" />
     <BMC_PARM ID="BMCHFS_USE_USER_CREDENTIALS" VALUE="NO" />
</BMCHTTP>

The following table describes each parameter in #NORMAL:

Parameter

Definition

Accepted value

Reference

PORT

Port value for the UIM server

Unique numeric value from 1 through 65535

AUTH_TIMEOUT_SECS

Timeout for security authorization

Numeric value in seconds

AFF_TIMEOUT_SECS

Idle timeout period for affinity tasks

Unique numeric value in seconds

HFS_DATASET

HFS data set name

PDS/E data set name for storing HFS data

ALLOW_NETCMD

Enable or disable network browser command interface

YES (default), NO, or AUTHORIZE

ENCRYPTION_LEVEL

Level of encryption or cryptography to use

NO—Do not use encryption. (BMC does not recommend this setting.) 

CREDENTIALS-IF—Use encrypted user credentials if the client supports them.

CREDENTIALS-REQUIRED—You must use encrypted user credentials.

SSL-IF—Use TLS connections if the client supports them.

SSL-REQUIRED—Accept only TLS connections.

None

USS_HFS_ROOT

The UNIX System Services Path for UIM to use as a work area

Any valid path to which the UIM started task user has read and write access

The default is /tmp/bmcuim.

None

SOCKET_REUSE_TIMEOUT

The amount of time, in seconds, that an open connection will remain open with no activity

When an inactive socket has been idle for this period of time, the system closes the socket.

Numeric value in seconds

The default is 300 seconds (5 minutes).

None

TIMESTAMP_CLOCK_SKEW

The amount that the host current clock and the client current clock can vary from each other and still be considered valid

This value is used in the validation of messages between the client and the UIM server. Some messages contain the UTC time value of the creation of the message. This time is compared to the UIM server time and is used to validate the currency of the message. Due to network transmission delay, processing delay, and clock variances between the UIM server and a client, messages can be detected as expired.

Numeric value in seconds

The default is 120 seconds (2 minutes).

None

BMCHFS_USE_USER_CREDENTIALS

Whether access to the UIM file system is restricted to user logon accounts

UIM has a proprietary hierarchical file system (BMCHFS). Access to the BMCHFS is normally executed under the UIM server started task account. In some instances, access to this data set might need to be restricted to user logon accounts.

Turning on this option (YES) requires that all user accounts accessing UIM must be authorized to read, write, and update the BMCHFS data set.

YES or NO (default)

None

Additionally, you can change the tracing options for the UIM server:


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*