220 lines
9.4 KiB
HTML
220 lines
9.4 KiB
HTML
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<meta name="Copyright" content="Copyright (c) 2006 by IBM Corporation">
|
||
|
|
<title>Preparing to Use the Virtual Terminal APIs</title>
|
||
|
|
<!-- Begin Header Records ========================================= -->
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<!-- VT2A SCRIPT A converted by B2H R4.1 (346) (CMS) by HOLTJM at -->
|
||
|
|
<!-- RCHVMW2 on 5 Feb 1999 at 07:56:18 -->
|
||
|
|
<!-- File restructured for V5R2 -->
|
||
|
|
<!-- End Header Records -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="../rzahg/ic.css">
|
||
|
|
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
|
||
|
|
<!-- Java sync-link -->
|
||
|
|
<script type="text/javascript" language="Javascript" src="../rzahg/synch.js">
|
||
|
|
</script>
|
||
|
|
|
||
|
|
<a name="Top_Of_Page"></a>
|
||
|
|
|
||
|
|
<h2>Preparing to Use the Virtual Terminal APIs</h2>
|
||
|
|
|
||
|
|
<p>The following steps are required to prepare your iSeries<SUP>(TM)</SUP> to run an
|
||
|
|
application using the virtual terminal APIs:</p>
|
||
|
|
|
||
|
|
<ol type="1">
|
||
|
|
<li>Set the number of automatically created virtual terminals using the
|
||
|
|
Automatic virtual device configuration indicator (QAUTOVRT) system value</li>
|
||
|
|
|
||
|
|
<li>Set the Limit security officer device access
|
||
|
|
<a href="#QLMTSECOFR">(QLMTSECOFR)</a> system value</li>
|
||
|
|
|
||
|
|
<li>Create user profiles using the Create User Profile
|
||
|
|
<a href="#CRTUSRPRF">(CRTUSRPRF)</a> command</li>
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
<br>
|
||
|
|
|
||
|
|
<h3><a name="QAUTOVRT">Step 1: Setting the Number of Automatically Created
|
||
|
|
Virtual Terminals</a></h3>
|
||
|
|
|
||
|
|
<p>The i5/OS<SUP>(TM)</SUP> licensed program uses virtual terminals to allow a server program
|
||
|
|
to interact with its client by sending and receiving data with iSeries
|
||
|
|
applications. The i5/OS operating system will automatically select (and create
|
||
|
|
if necessary) these virtual terminals for you.</p>
|
||
|
|
|
||
|
|
<p>The QAUTOVRT system value specifies the maximum number of terminals that
|
||
|
|
will be automatically configured by the system. When you set the QAUTOVRT
|
||
|
|
system value, the i5/OS licensed program automatically configures the required
|
||
|
|
virtual controllers and terminals. Controllers coordinate and control the
|
||
|
|
operation of one or more input/output terminals (such as work stations) and
|
||
|
|
synchronize the operation of such terminals with the operation of the entire
|
||
|
|
system. Use the Change System Value (CHGSYSVAL) command to change the value of
|
||
|
|
the QAUTOVRT system value. For example, entering the following command string
|
||
|
|
changes the number of virtual terminals that can be allocated on a system to
|
||
|
|
50:</p>
|
||
|
|
|
||
|
|
<pre>
|
||
|
|
CHGSYSVAL SYSVAL(QAUTOVRT) VALUE(50)
|
||
|
|
</pre>
|
||
|
|
|
||
|
|
<p>To determine and set the maximum number of users you want signed on to the
|
||
|
|
iSeries system at any time, do the following:</p>
|
||
|
|
|
||
|
|
<ul>
|
||
|
|
<li>Set the QAUTOVRT system value to *NOMAX, the maximum value allowed.</li>
|
||
|
|
|
||
|
|
<li>Have your users use the iSeries system until you decide that the number of
|
||
|
|
virtual terminals created is sufficient for normal system operation.</li>
|
||
|
|
|
||
|
|
<li>Use the Work with Configuration Status (WRKCFGSTS) command to determine the
|
||
|
|
number of work stations configured.</li>
|
||
|
|
|
||
|
|
<li>Change the QAUTOVRT system value from *NOMAX to the number of virtual
|
||
|
|
terminals you require for normal operation.</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<p>If you have never allowed virtual terminals to be configured automatically
|
||
|
|
on your system, the QAUTOVRT system value is 0. As a result, you cannot use the
|
||
|
|
virtual terminal APIs because the i5/OS licensed program is not able to create
|
||
|
|
more work stations than the number specified. If you change the QAUTOVRT system
|
||
|
|
value to 10, the next virtual terminal path opened causes the i5/OS licensed
|
||
|
|
program to create a virtual terminal. This virtual terminal is created because
|
||
|
|
the number of virtual terminals on the controller (0) is less than the number
|
||
|
|
specified in the QAUTOVRT system value (10). Even if you change the specified
|
||
|
|
number to 0 again, the next virtual terminal opened may succeed if a virtual
|
||
|
|
terminal exists that is not being used.</p>
|
||
|
|
|
||
|
|
<p>If a virtual terminal does not exist or is in use, the i5/OS licensed
|
||
|
|
program does not create a new virtual terminal because the number of virtual
|
||
|
|
terminals currently existing is greater than or equal to the specified QAUTOVRT
|
||
|
|
system value. When the number of virtual terminals that currently exist is
|
||
|
|
greater than or equal to the QAUTOVRT system value, the message CPF8940,
|
||
|
|
"Cannot automatically select virtual device", is sent to the system operator
|
||
|
|
message queue (QSYSOPR). You must either try again when a virtual terminal
|
||
|
|
description becomes available or increase the QAUTOVRT system value.</p>
|
||
|
|
|
||
|
|
<p>The i5/OS operating system uses the following conventions for naming
|
||
|
|
virtual controllers and work stations:</p>
|
||
|
|
|
||
|
|
<ul>
|
||
|
|
<li>Virtual controllers named QPACTL<em>nn</em> are used for auto-created
|
||
|
|
virtual terminal descriptions.</li>
|
||
|
|
|
||
|
|
<li>Virtual controllers named QVIRCD<em>nnnn</em> are used for named virtual
|
||
|
|
terminal descriptions.</li>
|
||
|
|
|
||
|
|
<li>Virtual terminal descriptions named QPADEV<em>xxxx</em> are auto-created
|
||
|
|
devices.</li>
|
||
|
|
|
||
|
|
<li>Named virtual terminal devices may be requested using the virtual terminal
|
||
|
|
APIs. An example of a named virtual terminal device would be NEWYORK001.</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<p>Consider the following when you allow the i5/OS licensed program to
|
||
|
|
automatically configure work stations:</p>
|
||
|
|
|
||
|
|
<ul>
|
||
|
|
<li>The i5/OS licensed program does not delete virtual terminals, even when
|
||
|
|
the number of work stations attached to virtual controllers exceeds the limit
|
||
|
|
set by QAUTOVRT.
|
||
|
|
|
||
|
|
<p>If you want the extra work stations deleted, you must manually delete
|
||
|
|
them.</p>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>The i5/OS licensed program allows a maximum of 254 virtual terminals on
|
||
|
|
the QPACTL01 controller before it creates QPACTL02. This value is usually
|
||
|
|
adequate. If you delete work stations to enforce a smaller value for the
|
||
|
|
QAUTOVRT limit, begin by deleting the work stations from the controller with
|
||
|
|
the highest numeric value in its name (where <em>nn</em> in the
|
||
|
|
QPACTL<em>nn</em> name is largest).
|
||
|
|
|
||
|
|
<p><strong>Note:</strong> Changing this system value affects other iSeries
|
||
|
|
products and programs requiring automatic configuration. This includes TCP/IP
|
||
|
|
TELNET, 5250 display station pass-through, and any other programs using the
|
||
|
|
virtual terminal APIs.</p>
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<br>
|
||
|
|
|
||
|
|
<h3><a name="QLMTSECOFR">Step 2: Setting the Limit Security Officer
|
||
|
|
(QLMTSECOFR) Value</a></h3>
|
||
|
|
|
||
|
|
<p>The Limit security officer device access (QLMTSECOFR) system value, limits
|
||
|
|
the devices the security officer can sign on to. The security officer controls
|
||
|
|
all of the security authorizations provided by the iSeries system. If the
|
||
|
|
QLMTSECOFR value is greater than zero, the security officer must be authorized
|
||
|
|
to use the virtual device descriptions. When this value equals 0, however, the
|
||
|
|
system does not limit the devices the security officer can use to sign on the
|
||
|
|
system.</p>
|
||
|
|
|
||
|
|
<p>When the system security level (QSECURITY) system value is set to 30, a
|
||
|
|
security officer with all object authority (*ALLOBJ) must be authorized to use
|
||
|
|
the work stations. For example, for each display station that a security
|
||
|
|
officer wants to sign on to (local, remote, or virtual), the user must
|
||
|
|
authorize the security officer using the following Grant Object Authority
|
||
|
|
(GRTOBJAUT) command:</p>
|
||
|
|
|
||
|
|
<pre>
|
||
|
|
GRTOBJAUT OBJ(display-name) OBJTYPE(*DEVD) AUT(*CHANGE) USER(QSECOFR)
|
||
|
|
</pre>
|
||
|
|
|
||
|
|
<p>This procedure is very important because using the virtual terminal APIs
|
||
|
|
automatically configures virtual terminals (devices). Automatic configuration
|
||
|
|
is a function that names and creates the descriptions of network devices and
|
||
|
|
controllers attached to a line. If the QLMTSECOFR value is set to 0, all
|
||
|
|
virtual terminals automatically configured when you use the virtual terminal
|
||
|
|
APIs can be used by the security officer. If you set the QLMTSECOFR value to 1,
|
||
|
|
your security officer is not able to use the virtual terminals unless you
|
||
|
|
specifically grant object authority to the security officer for that virtual
|
||
|
|
terminal. The automatic configuration support can delete and re-create the
|
||
|
|
virtual terminal. If this occurs, authority must be granted to the security
|
||
|
|
officer each time the virtual terminal is created.</p>
|
||
|
|
|
||
|
|
<h4><a name="HDRSIGNATT">Security Considerations</a></h4>
|
||
|
|
|
||
|
|
<p>The number of sign-on attempts allowed increases if virtual terminals are
|
||
|
|
automatically configured. The number of sign-on attempts is equal to the number
|
||
|
|
of system sign-on attempts allowed multiplied by the number of virtual
|
||
|
|
terminals that can be created. The number of system sign-on attempts allowed is
|
||
|
|
defined by the QMAXSIGN system value. The number of virtual terminals that can
|
||
|
|
be created is defined by the QAUTOVRT system value.</p>
|
||
|
|
|
||
|
|
<br>
|
||
|
|
|
||
|
|
<h3><a name="CRTUSRPRF">Step 3: Creating User Profiles</a></h3>
|
||
|
|
|
||
|
|
<p>You should create one or more user profiles on the iSeries system for users
|
||
|
|
of the virtual terminal supported by the client and server programs. The
|
||
|
|
default user profile is *SYS. The following example shows a sample user
|
||
|
|
profile:</p>
|
||
|
|
|
||
|
|
<pre>
|
||
|
|
CRTUSRPRF USRPRF(CLERK1) PASSWORD(unique-password)
|
||
|
|
JOBD(CLERKLIB/CLERKL1)
|
||
|
|
TEXT('User profile for one group of clerks')
|
||
|
|
</pre>
|
||
|
|
|
||
|
|
<br>
|
||
|
|
|
||
|
|
<hr>
|
||
|
|
<table align="center" cellpadding="2" cellspacing="2">
|
||
|
|
<tr align="center">
|
||
|
|
<td valign="middle" align="center">
|
||
|
|
<a href="#Top_Of_Page">Top</a> |
|
||
|
|
<a href="vt1a.htm">Virtual Terminal APIs</a> |
|
||
|
|
<a href="aplist.htm">APIs by category</a></td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
</body>
|
||
|
|
</html>
|