Permanently changing the configuration of the UIM server
The UIM server is configured during installation. However, you can permanently or temporarily change the configuration by changing the variable values in the startup and trace members of the configuration file.
Each UIM server requires a configuration member, called the startup member. This member describes the unique characteristics of each server and is a parameter in the UIM server configuration file.
The sample library (hlq.SAMP) includes a member named #NORMAL, which is a template for the startup member. The installation process customizes #NORMAL, gives it the same name as the started task procedure, and copies it to the hlq.CONFIG data set.
The following figure shows the #NORMAL member template:
<BMC_PARM ID="PORT" VALUE="3683" />
<BMC_PARM ID="AUTH_TIMEOUT_SECS" VALUE="1800" />
<BMC_PARM ID="AFF_TIMEOUT_SECS" VALUE="1800" />
<BMC_PARM ID="HFS_DATASET" VALUE="hlq.HFS" />
<BMC_PARM ID="ALLOW_NETCMD" VALUE="YES" />
<BMC_PARM ID="ENCRYPTION_LEVEL" VALUE="SSL-IF" />
<BMC_PARM ID="USS_HFS_ROOT" VALUE="/tmp/bmcuim" />
<BMC_PARM ID="SOCKET_REUSE_TIMEOUT" VALUE="300" />
<BMC_PARM ID="TIMESTAMP_CLOCK_SKEW" VALUE="120" />
<BMC_PARM ID="BMCHFS_USE_USER_CREDENTIALS" VALUE="NO" />
</BMCHTTP>
The following table describes each parameter in #NORMAL:
Parameter | Definition | Accepted value | Reference |
---|---|---|---|
PORT | Port value for the UIM server | Numeric value from 1 through 65535 where the numeric value chosen is unique on the hosts where this configuration member is used | |
AUTH_TIMEOUT_SECS | Timeout for security authorization | Numeric value in seconds | |
AFF_TIMEOUT_SECS | Idle timeout period for affinity tasks | Unique numeric value in seconds | |
HFS_DATASET | BMCHFS server-side storage data set name | PDSE data set name for storing the BMCHFS data | |
ALLOW_NETCMD | Enable or disable network browser command interface | YES (default), NO, or AUTHORIZE | |
ENCRYPTION_LEVEL | Level of encryption or cryptography to use | NO—Do not use encryption. (BMC does not recommend this setting.) CREDENTIALS-IF—Use encrypted user credentials if the client supports them. CREDENTIALS-REQUIRED—You must use encrypted user credentials. SSL-IF—Use TLS connections if the client supports them. SSL-REQUIRED—Accept only TLS connections. | None |
USS_HFS_ROOT | The UNIX System Services Path for UIM to use as a work area | Any valid path to which the UIM started task user has read and write access The default is /tmp/bmcuim. | None |
SOCKET_REUSE_TIMEOUT | The amount of time, in seconds, that an open connection will remain open with no activity When an inactive socket has been idle for this period of time, the system closes the socket. | Numeric value in seconds The default is 300 seconds (5 minutes). | None |
TIMESTAMP_CLOCK_SKEW | The amount that the host current clock and the client current clock can vary from each other and still be considered valid This value is used in the validation of messages between the client and the UIM server. Some messages contain the UTC time value of the creation of the message. This time is compared to the UIM server time and is used to validate the currency of the message. Due to network transmission delay, processing delay, and clock variances between the UIM server and a client, messages can be detected as expired. | Numeric value in seconds The default is 120 seconds (2 minutes). | None |
BMCHFS_USE_USER_CREDENTIALS | Whether access to the UIM file system is restricted to user logon accounts UIM has a proprietary hierarchical file system (BMCHFS). Access to the BMCHFS is normally executed under the UIM server started task account. In some instances, access to this data set might need to be restricted to user logon accounts. Turning on this option (YES) requires that all user accounts accessing UIM must be authorized to read, write, and update the BMCHFS data set. | YES or NO (default) | None |
Additionally, you can change the tracing options for the UIM server:
- Enabling-or-disabling-the-overall-tracing-option-permanently
- Enabling-or-disabling-the-overall-tracing-option-temporarily
- Enabling-or-disabling-specific-tracing-options-permanently
- Enabling-or-disabling-specific-tracing-options-temporarily
Related topic