166 lines
9.9 KiB
HTML
166 lines
9.9 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Timeout interval for inactive jobs" />
|
||
|
|
<meta name="abstract" content="The timeout interval for inactive jobs system value specifies in minutes how long the system allows a job to be inactive before taking action." />
|
||
|
|
<meta name="description" content="The timeout interval for inactive jobs system value specifies in minutes how long the system allows a job to be inactive before taking action." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvplansyslvlsec.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="qinactitv" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Timeout interval for inactive jobs</title>
|
||
|
|
</head>
|
||
|
|
<body id="qinactitv"><a name="qinactitv"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Timeout interval for inactive jobs</h1>
|
||
|
|
<div><p>The timeout interval for inactive jobs system value specifies in
|
||
|
|
minutes how long the system allows a job to be inactive before taking action.</p>
|
||
|
|
<p>A workstation is considered inactive if it is waiting at a menu or display,
|
||
|
|
or if it is waiting for message input with no user interaction. User interaction
|
||
|
|
includes using the Enter key, paging functions, function keys, and help functions. </p>
|
||
|
|
<p>The system determines which jobs are inactive. For example if a user starts
|
||
|
|
a second interactive job at the same display device, then any interaction
|
||
|
|
such as the pressing the Enter key on either job causes both jobs to be marked
|
||
|
|
as active.</p>
|
||
|
|
<p>The timeout interval for inactive jobs system value works with the system
|
||
|
|
value that determines what action the system takes when an inactive job exceeds
|
||
|
|
the specified interval. For information of the related system value, see <a href="rzamvqinatmsgq.htm">Timeout interval action</a>.
|
||
|
|
When the system is started, it checks for inactive jobs that are at or exceeds
|
||
|
|
the timeout interval. If a system is started at 9:30 in the morning and the
|
||
|
|
timeout interval is set at 30 minutes, the system will check for inactive
|
||
|
|
jobs at 10:00, 10:30, 11:00, and so on. If it discovers a job that has been
|
||
|
|
inactive for 30 minutes or more, it takes the action specified by the timeout
|
||
|
|
interval action system value. These two system values provide security by
|
||
|
|
preventing users from leaving inactive workstations signed on. An inactive
|
||
|
|
workstation might allow an unauthorized person access to the system.</p>
|
||
|
|
<p>See <a href="#qinactitv__quickref">Quick reference</a> table
|
||
|
|
for an overview of the timeout interval for inactive jobs system value. </p>
|
||
|
|
<div class="p">
|
||
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" frame="border" border="1" rules="all"><caption>Table 1. Possible values for the timeout interval for
|
||
|
|
inactive jobs system value</caption><thead align="left"><tr valign="bottom"><th valign="bottom" id="d0e36">iSeries™ Navigator </th>
|
||
|
|
<th valign="bottom" id="d0e40">Character-based interface</th>
|
||
|
|
<th valign="bottom" id="d0e42">Description</th>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<tbody><tr><td valign="top" headers="d0e36 ">Do not time out</td>
|
||
|
|
<td valign="top" headers="d0e40 ">*NONE</td>
|
||
|
|
<td valign="top" headers="d0e42 ">The system does not check for inactive jobs.</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e36 ">5-300 (in minutes)</td>
|
||
|
|
<td valign="top" headers="d0e40 "><em>interval-in-minutes</em></td>
|
||
|
|
<td valign="top" headers="d0e42 ">Specify a value of 5 through 300. </td>
|
||
|
|
</tr>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<p><strong>Relationship to security policy</strong></p>
|
||
|
|
<p>Within your security policy you should inform users your company's expectations
|
||
|
|
for managing their signon activities. Inactive jobs pose a potential risk
|
||
|
|
to system resources because someone could gain access to your system through
|
||
|
|
an inactive terminal. However, normal job duties often interrupt users at
|
||
|
|
their workstations, so you need to provide some flexibility for these expected
|
||
|
|
interruptions. Using the interactive job system values provide a means to
|
||
|
|
maintain security of system resource and provide user's flexibility to perform
|
||
|
|
all their job responsibilities. Your security policy should state expectations
|
||
|
|
for users regarding signon activities to both their workstations and to system
|
||
|
|
to which they have access. For example, users are expected to password protected
|
||
|
|
their workstations and enable password protection every time they leave their
|
||
|
|
workstation. If they need to leave their workstation while performing a job
|
||
|
|
on the system, locking their workstation provides a first barrier to anyone
|
||
|
|
who tries to gain access to your system through that workstation. However,
|
||
|
|
password protection is only the first line of defense. Use the interactive
|
||
|
|
job system values to ensure that malicious users do not gain access to system
|
||
|
|
resources. </p>
|
||
|
|
<p>If a job exceeds the timeout interval for inactive jobs, the
|
||
|
|
system will take the specified timeout interval action. If this action is
|
||
|
|
to disconnect the job, the system will wait until the timeout interval has
|
||
|
|
elapsed before disconnecting the job. If this action is to end the job, the
|
||
|
|
system will wait until the timeout interval has elapsed before ending the
|
||
|
|
job. Assume you have set the inactive job timeout interval to 30 minutes and
|
||
|
|
the inactive job action to disconnect the job. Also assume that the disconnected
|
||
|
|
job timeout interval is 300 minutes or 5 hours. If a user forgets to signoff
|
||
|
|
at 9:30 a.m., the system disconnects her job at 10:00 a.m. and will end the
|
||
|
|
job at 3:00 p.m.</p>
|
||
|
|
<p>When the system ends the disconnected job, any data on the user's display
|
||
|
|
that has not yet been entered into the system will be lost. If the user signs
|
||
|
|
on to the same workstation before the disconnected job timeout elapses, then
|
||
|
|
the job resumes from the point where the system disconnected the job.</p>
|
||
|
|
<div class="p">
|
||
|
|
<div class="tablenoborder"><a name="qinactitv__quickref"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="qinactitv__quickref" frame="border" border="1" rules="all"><caption>Table 2. Quick Reference. Provides details
|
||
|
|
for the timeout interval for inactive jobs system value.</caption><thead align="left"><tr valign="bottom"><th valign="bottom" id="d0e80">iSeries Navigator name</th>
|
||
|
|
<th valign="bottom" id="d0e84">Timeout interval</th>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<tbody><tr><td valign="top" headers="d0e80 ">Character-based interface name</td>
|
||
|
|
<td valign="top" headers="d0e84 ">QINACTITV</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 ">Authority</td>
|
||
|
|
<td valign="top" headers="d0e84 "><p>All object access (*ALLOBJ)<br />
|
||
|
|
Security administrator (*SECADM)</p>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> The Security Officer (QSECOFR) user profile is shipped with
|
||
|
|
these authorities. </div>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 ">How to access</td>
|
||
|
|
<td valign="top" headers="d0e84 "><div class="p"><strong>iSeries Navigator</strong><ol><li>Expand <span class="menucascade"><span class="uicontrol">Configuration and Service</span> > <span class="uicontrol">System
|
||
|
|
Values</span></span>.</li>
|
||
|
|
<li>Right click <strong>Jobs</strong> and select <strong>Properties</strong>.</li>
|
||
|
|
<li>On the <strong>Interactive Jobs</strong> page, you will find the option for timeout
|
||
|
|
interval for inactive jobs.</li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
<div class="p"><strong>Character-based interface</strong><ol><li>In the character-based interface, type <samp class="codeph">WRKSYSVAL QINACTITV</samp>.</li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 ">Changes take effect</td>
|
||
|
|
<td valign="top" headers="d0e84 ">Immediately</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 ">Default value</td>
|
||
|
|
<td valign="top" headers="d0e84 ">Do not time-out</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 ">Recommended value</td>
|
||
|
|
<td valign="top" headers="d0e84 ">60 minutes</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 "><a href="rzamvlockdown.htm">Lockable</a></td>
|
||
|
|
<td valign="top" headers="d0e84 ">Yes</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e80 ">Special considerations</td>
|
||
|
|
<td valign="top" headers="d0e84 ">This system value is used with the <a href="rzamvqinatmsgq.htm">timeout interval action</a> for
|
||
|
|
inactive jobs and the <a href="rzamvqdscjobitv.htm">timeout interval for disconnected jobs</a> system values.
|
||
|
|
Together these system values ensure that inactive and disconnected jobs are
|
||
|
|
ended properly. </td>
|
||
|
|
</tr>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<p>For more in-depth information about this security value, see Chapter 3, <span class="q">"Security
|
||
|
|
System Values"</span> in <a href="../books/sc415302.pdf" target="_blank">Security
|
||
|
|
Reference</a>. </p>
|
||
|
|
<p></p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvplansyslvlsec.htm" title="System security entails controlling user access and their privileges, maintaining information integrity, monitoring processes and access, auditing system functions, and providing backup and recovery of security related information.">Plan system security</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|