Viewing Server PARMLIB Member AAVWALL parameters

YES|no

Note: Specifying NO can slow down dump capture processing and is therefore strongly discouraged.

Specifies whether the TDCAS or viewing server address space is non-swappable. 

If you specified the MVS_SUBSYSTEM parameter with the OWNER subparameter for this viewing server, the viewing server address space is made non-swappable, and this parameter is ignored. This is because the MVS subsystem uses cross-memory services to communicate and, therefore, the viewing server address space must always be available.

Specifying NO can result in longer response time for Abend-AID Viewer users.

For VTAM users only. Specifies the time, in minutes, that the viewing server retains an inactive user session before logging the user off. When the specified interval is reached, the user’s Abend-AID Viewer session is terminated. This option does not affect TSO/ISPF or CICS users.

5
The default value should be adequate for most Abend-AID sites. Use the following formula if you want to change the value: (number of concurrent users ¸   10) + 5

Each additional task beyond 5 requires the viewing server region to be increased by 1MB. Thus, if you change the TP_SUBTASKS value from 5 to 32, you must add 27MB to the region for the viewing server.

Used by: BDCAS, TDCAS, viewing server

Specifies how often (in minutes) the Abend-AID Viewer checks the dump information file for the presence of new region dumps to import. This parameter is applicable only if you are using the MVS post-dump exit to automatically import region dumps. See Customizing SVC Dump Processing for more information.

Specifies how often the Abend-AID Viewer scans the shared directory for updates (new dumps, deleted dumps, and so forth). The Abend-AID Fault Summary and Abend-AID Directory displays are built from the information in the shared directory, and the information presented to a user on these displays reflects the contents of the shared directory the last time it was scanned. Therefore, specify a low number for this value if you want the Abend-AID Directory and the Fault Summary to display very recent changes.

Note: Increasing this value reduces CPU cycles used by the Abend-AID viewing server.

Specifies whether the data sets created by the Abend-AID print function are managed by SMS, and where they are allocated. The print function is described in the Abend-AID User/Reference Guide or the Abend-AID for CICS User Guide. If you do not specify this parameter, the Abend-AID Viewer print function allocates data sets that are not managed by SMS, using the generic DASD unit defined at your site (for example, SYSDA or SYSALLDA).

If you specify PRINT_FILE_ALLOC=SMS, you must also specify the SMS storage class to use for allocating the Abend-AID Viewer data sets. For example:

PRINT_FILE_SMS_STORCLAS=STANDARD

If you specify PRINT_FILE_ALLOC=SMS, you must also specify the SMS management class to use for allocating the Abend-AID Viewer data sets. For example:

PRINT_FILE_SMS_MGMTCLAS=STANDARD

Specifies a four-character MVS viewing subsystem name. Abend-AID dynamically starts the subsystem, so you must not add an entry for it to SYS1.PARMLIB(IEFSSNxx. Abend-AID uses the viewing subsystem to handle task and address space termination to ensure proper session outage notification.

Note: Abend-AID requires only one MVS viewing subsystem per MVS image, regardless of how many viewing servers you are running on the image. 

To share a single subsystem, one viewing server must be defined as the subsystem owner, and the other viewing servers on the image are defined as users of the subsystem. The name you specify depends on how this viewing server is using the subsystem:
–  If this is the only viewing server on the MVS image, the name you specify must be unique on this MVS image.

–  If you have multiple Abend-AID viewing servers on the MVS image but are not sharing the subsystem between them, specify a unique name for each viewing server on this MVS    image.

– If you are sharing the subsystem between multiple Abend-AID viewing servers on this MVS    image, the name you specify must be the same for all the viewing servers on the image.

– The name you specify must not be used by any other non-Abend-AID viewing subsystem    on this MVS image.

Optional for the Abend-AID Web Browser Interface. If TCP/IP VIPARANGE processing has been defined in the TCP/IP configuration data sets, specify the address (IPv4 or IPv6) from which connections are accepted for this Abend-AID viewing server. This address overrides the IP address of the host on which the Abend-AID viewing server is running, thus allowing you to move the Abend-AID viewing server from one LPAR to another retaining the IP address known to the network clients. One reason for specifying this parameter is to enable running theAbend-AID viewing server on a disaster recovery site without requiring end users to change the IP address or URL they use to log onto the Abend-AID viewing server.

The address must be in presentation form for one of the following

Optional for the Abend-AID Web Browser Interface. If TCP/IP VIPARANGE processing has been defined in the TCP/IP configuration data sets, specify the name, known to your HOSTS file or to your DNS server from which connections are accepted for this Abend-AID viewing server. This name overrides the IP address of the host on which the Abend-AID viewing server is running, thus allowing you to move the Abend-AID viewing server from one LPAR to another retaining the IP address known to the network clients. One reason for specifying this parameter is to enable running the Abend-AID viewing server on a disaster recovery site without requiring end users to change the IP address or URL they use to log on to the Abend-AID viewing server.

There is no default value for this parameter, but the value used in all distributed Abend-AID examples is CCFXLOGM.

Used by:   viewing server

Specifies whether Abend-AID requires a password when a user signs onto this address space. For the viewing server, this parameter makes calls to your site’s external security software.

Specifies the functions for which Abend-AID makes calls to external security packages. Each subparameter identifies a function for which Abend-AID can potentially make external security calls. If you specify a subparameter for the EXTERNAL_SECURITY_FUNCTION_CHECK parameter, the Abend-AID Viewer will check the authority of each user who attempts that function. For example, if you specify IMPORT, external security calls are made each time a user attempts to import a dump to determine if the user has access to that function.

Notes:
You must write rules for your external security package to restrict these functions; specifying a subparameter simply enables the exit point.

If you specify more than one value, enclose the values in parentheses and separate them by commas. For example:
EXTERNAL_SECURITY_FUNCTION_CHECK= (CUSTOM,SHUTDOWN)

To enable security checking for one or more of the resources described below, specify the resource name on the EXTERNAL_SECURITY_FUNCTION_CHECK parameter. You must code the appropriate rules for your external security package. Refer to the Security-planning in the Abend-AID Installation and Configuration Guide for specific information.

NONE
No external security calls are made to check access to Abend-AID functions. This value is the default.

CUSTOM
External security calls are made when a user logs onto Abend-AID to determine whether the user can access the online customization screens.

DIRCMDS
External security calls are made when a user issues an Abend-AID Directory line command (for example, to delete a dump), to determine whether the user has the appropriate authority. If you specify CSS for the EXTERNAL_SECURITY_DDIO_METHOD viewing server configuration parameter, the CSS security exit module CWASSECU is used to determine user authority to select and manipulate a transaction dump from the Abend-AID Directory.

IMPORT
External security calls are made when a user attempts to import a region dump using the Data set Import screen, to determine whether the user has the appropriate authority.

Note: Users must additionally have READ authority to the dump data set they are attempting to import.

IPCS
External security calls are made when a user attempts to issue IPCS commands using the Abend-AID IPCS Command Facility, to determine whether the user has the appropriate authority.

SHUTDOWN
External security calls are made when a user issues the viewing server SHUTDOWN command, to determine whether the user has the appropriate authority.

REXX
External security calls are made when a user attempts to invoke the Abend-AID REXX application program interface (API), to determine whether the user has the appropriate authority.

LOGSPOOL
External security calls are made when a user issues the viewing server LOGSPOOL command, to determine whether the user has the appropriate authority.

Specifies the SAF resource class used by Abend-AID to restrict access to the Abend-AID functions specified by the EXTERNAL_SECURITY_FUNCTION_CHECK parameter.

By default, Abend-AID uses data set class, and generates pseudo data set names that correspond to Abend-AID functions.

See the External security consideration in the Abend-AID Installation and Configuration Guide for more information about writing the rules to restrict access to Abend-AID functions.

Used by:   viewing server

Also review the description of the EXTERNAL_SECURITY_DATASET_CHECK parameter. Both parameters control how the report database and source listing files are accessed, and one or both may be applicable to your site. Specifies whether SAF security or the site-customized BMC AMI Common Shared Services (CSS) security exit module CWASSECU should be used by Abend-AID when checking user access to issue Abend-AID Directory line commands against transaction dumps and source listing files. 

SAF|css

SAF: This value is the default. External security (SAF) calls are made by Abend-AID even if module CWASSECU is in the Enterprise Common Componetnts (ECC) load library. This parameter is useful if you want Abend-AID to use SAF security, but you are sharing an ECC load library between BMC products, and CWASSECU is in the ECC load library for use by another BMC product. Module CWASSECU is referenced to determine the access users have for selecting and manipulating transaction dumps. CWASSECU does not affect access to region dump data sets. SAF security is used to control this access.

CSS: This parameter is referenced only if you specify the DIRCMDS sub-parameter for the EXTERNAL_SECURITY_FUNCTION_CHECK viewing server configuration parameter. Only files in DDIO format (that is, report databases and source listing files) are affected by this parameter. If you specify CSS and module CWASSECU is not in the ECC load library, the Abend-AID viewing server will not start.

Notes:

1. This parameter was provided to facilitate conversion for BMC customers who wanted to continue to use module CWASSECU with the Abend-AID Viewer. However,      we recommend that you use SAF security to restrict access to Abend-AID files.
2. The CSS security exit module, CWASSECU, is described in the BMC AMI Common Shared Services User/Reference Guide.
3. You must also specify EXTERNAL_SECURITY_FUNCTION_CHECK=DIRCMDS for the EXTERNAL_SECURITY_DDIO_METHOD parameter to be valid.
4. Refer to the Enterprise Common Components Installation and Configuration Guide for more specific module CWASSECU installation information.

(REGION,TRAN,SLS,SOURCE,CUST)|none

If you specify more than one value, enclose the values you specify in parentheses and separate them by commas. For example: EXTERNAL_SECURITY_DATASET_CHECK=(TRAN,SLS) You must also specify YES for the EXTERNAL_SECURITY_ENABLED parameter for the EXTERNAL_SECURITY_DATASET_CHECK parameter to be valid.

For VTAM and CICS access, external security is always checked for print file data set allocations. If external security is enabled, the security check is against the data set name prefix if one is specified, first, in the user’s profile (as described in the Abend-AID User/Reference Guide or the Abend-AID for CICS User Guide) or, next, in the site user profile (as described in Print data set prefix for VTAM, CICS, and Web browser access). If none is specified for either profile, the security check is against the default prefix, which is the user ID of the Abend-AID Viewer user. If external security is disabled, the security check is against the Abend-AID viewing server user ID.

You must specify EXTERNAL_SECURITY_DATASET_CHECK=(REGION,TRAN) in order to restrict a user’s ability to view and select entries from the data sets for which he has READ authority.

NONE
User data set-level access is not checked for the region dump data sets, report databases, or source listing files. If you specify NONE, access to these files is based on the authority of the viewing server to access these files, and not the authority of the user. For example, if a user does not have READ access to region dump data set A.B.C, but the viewing server does have authority, the user is able to access the data set from the Abend-AID Viewer.

REGION
User data set-level access to the region dump data sets is checked.

TRAN
User data set-level access to the report databases is checked.

SLS
User data set-level access to the source listing files, including the Scratchpad listing file, is checked. This option can be used to allow users to access their own source listing files without also requiring the viewing server user ID to have access to individual user source listing files. When using this option, users also need READ access to the Scratchpad listing file and those files on the //MFDDXLSF DD statement in the viewing server JCL. One way to grant this access is to give these data sets a UACC of READ. If both SLS and SOURCE are specified, then both the user data set-level access and the server data set-level access are checked for each source listing file.

SOURCE
Server data set-level access to the source listing files (including the Scratchpad listing file) is checked. This value allows a site to set universal access of NONE on the source listing files or the Scratchpad data set, and to allow only a few individuals the authority to manage the contents of the files. Doing so means that users can convert and will be able to merge source, but they will not be able to view or manipulate source listing files from the Source Directory screen. See Source Mismatch Selection Screen in the Abend-AID User/Reference Guide or “Source Mismatch Selection Screen” in the Abend-AID for CICS User guide for more information about using the Scratchpad listing file and source support. Using this value requires the server to have READ access to individual user’s source listing files.
If both SLS and SOURCE are specified, then both the user data set-level access and the server data set-level access are checked for each source listing file.

CUST
User data set-level access to the Customization file is checked. This option can be used to restrict a user's ability to delete obsolete server records from the
Customization file using the CUSTUSER command. Because the Customization file has a UACC of READ, all users can issue the CUSTUSER command to view server records. However, with this parameter setting, users can delete obsolete records for inactive servers only if they have UPDATE access to the Customization file. 

By default, data set-level access to all of the listed files is checked — the default value for this parameter is REGION,TRAN,SLS. You can remove any of the values from the selection to avoid data set-level checking for the file type.

Specifies the suffix of the IPCSPRxx member in SYS1.PARMLIB. This parameter is required only if you are enabling the IPCS command facility for this viewing server, and only if you want the Abend-AID Viewer to reference a session parameter member name other than IPCSPR00 in SYS1.PARMLIB. See Making-IPCS-specifications  for more information about how the Abend-AID Viewer uses IPCSPRxx, and other options that are available to you for specifying a session parameter member.

Specifies whether the HOTKEY command users are restricted from access to the Abend-AID Directory. By default the HOTKEY command restricts users from viewing Abend-AID Directory entries using the DIRECTORY command. They will have access to their own jobs only, one-at-a-time.