Permanently changing the configuration of the UIM server
Each UIM server requires a configuration member, called the startup member. This member describes the unique characteristics of each server and is a parameter in the UIM server configuration file.
The sample library (hlq.SAMP) includes a member named #NORMAL, which is a template for the startup member. The installation process customizes #NORMAL, gives it the same name as the started task procedure, and copies it to the hlq.CONFIG data set.
The following figure shows the #NORMAL member template:
<BMC_PARM ID="PORT" VALUE="3683" />
<BMC_PARM ID="AUTH_TIMEOUT_SECS" VALUE="1800" />
<BMC_PARM ID="AFF_TIMEOUT_SECS" VALUE="1800" />
<BMC_PARM ID="HFS_DATASET" VALUE="hlq.HFS" />
<BMC_PARM ID="ALLOW_NETCMD" VALUE="YES" />
<BMC_PARM ID="ENCRYPTION_LEVEL" VALUE="SSL-IF" />
<BMC_PARM ID="USS_HFS_ROOT" VALUE="/tmp/bmcuim" />
<BMC_PARM ID="SOCKET_REUSE_TIMEOUT" VALUE="300" />
<BMC_PARM ID="TIMESTAMP_CLOCK_SKEW" VALUE="120" />
<BMC_PARM ID="BMCHFS_USE_USER_CREDENTIALS" VALUE="NO" />
<BMC_PARM ID="CHARSET_LANG" VALUE="USENGLISH" />
</BMCHTTP>
The following table describes each parameter in #NORMAL:
Parameter | Definition | Accepted value | Reference |
---|---|---|---|
PORT | Port value for the UIM server | Numeric value from 1 through 65535 where the numeric value chosen is unique on the hosts where this configuration member is used | |
AUTH_TIMEOUT_SECS | Timeout for security authorization | Numeric value in seconds | |
AFF_TIMEOUT_SECS | Idle timeout period for affinity tasks | Unique numeric value in seconds | |
HFS_DATASET | BMCHFS server-side storage data set name | PDSE data set name for storing the BMCHFS data | |
ALLOW_NETCMD | Enable or disable network browser command interface | YES (default), NO, or AUTHORIZE | |
ENCRYPTION_LEVEL | Level of encryption or cryptography to use | NO—Do not use encryption. (BMC does not recommend this setting.) CREDENTIALS-IF—Use encrypted user credentials if the client supports them. CREDENTIALS-REQUIRED—You must use encrypted user credentials. SSL-IF—Use TLS connections if the client supports them. SSL-REQUIRED—Accept only TLS connections. | None |
USS_HFS_ROOT | UNIX System Services Path for UIM to use as a work area | Any valid path to which the UIM started task user has read and write access The default is /tmp/bmcuim. | None |
SOCKET_REUSE_TIMEOUT | Amount of time, in seconds, that an open connection will remain open with no activity When an inactive socket has been idle for this period, the system closes the socket. | Numeric value in seconds The default is 300 seconds (5 minutes). | None |
TIMESTAMP_CLOCK_SKEW | Amount of time that the host current clock and the client current clock can vary from each other and still be considered valid This value is used in the validation of messages between the client and the UIM server. Some messages contain the UTC time value of the creation of the message. This time is compared to the UIM server time and is used to validate the currency of the message. Due to network transmission delay, processing delay, and clock variances between the UIM server and a client, messages can be detected as expired. | Numeric value in seconds The default is 120 seconds (2 minutes). | None |
BMCHFS_USE_USER_CREDENTIALS | Specifies whether access to the UIM file system is restricted to user logon accounts UIM has a proprietary hierarchical file system (BMCHFS). Access to the BMCHFS is normally executed under the UIM server started task account. In some instances, access to this data set might need to be restricted to user logon accounts. Turning on this option (YES) requires that all user accounts accessing UIM must be authorized to read, write, and update the BMCHFS data set. | YES or NO (default) | None |
CHARSET_LANG | Language used to match the character set language in the translation table entry for communication between the client and the host. By setting this parameter value, you can get the translation index value to find the corresponding translation table address to be used. | HEBREW or USENGLISH (default) | None |
Additionally, you can change the tracing options for the UIM server: