229 lines
12 KiB
HTML
229 lines
12 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="System values on the iSeries server" />
|
||
|
|
<meta name="abstract" content="Learn about the system values that are important in client/server environments." />
|
||
|
|
<meta name="description" content="Learn about the system values that are important in client/server environments." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzaiimst27.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzaiimst26" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>System values on the iSeries server</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzaiimst26"><a name="rzaiimst26"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">System values on the iSeries server</h1>
|
||
|
|
<div><p>Learn about the system values that are important in client/server
|
||
|
|
environments.</p>
|
||
|
|
<p>A system value contains control information that operates certain parts
|
||
|
|
of the system. A user can change the system values to define the work environment.
|
||
|
|
Examples of system values are system date and library list.</p>
|
||
|
|
<p>The iSeries™ server
|
||
|
|
has many system values. The following values are of particular interest in
|
||
|
|
a client/server environment.</p>
|
||
|
|
<dl><dt class="dlterm">QAUDCTL</dt>
|
||
|
|
<dd>Audit control. This system value contains the on and off switches for
|
||
|
|
object and user level auditing. Changes that are made to this system value
|
||
|
|
take effect immediately.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QAUDENDACN</dt>
|
||
|
|
<dd>Audit journal error action. This system value specifies the action the
|
||
|
|
system takes if errors occur when an audit journal entry is being sent by
|
||
|
|
the operating system security audit journal. Changes that are made to this
|
||
|
|
system value take effect immediately.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QAUDFRCLVL</dt>
|
||
|
|
<dd>Force audit journal. This system value specifies the number of audit journal
|
||
|
|
entries that can be written to the security auditing journal before the journal
|
||
|
|
entry data is forced to auxiliary storage. Changes that are made to this system
|
||
|
|
value take effect immediately.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QAUDLVL</dt>
|
||
|
|
<dd>Security auditing level. Changes made to this system value take effect
|
||
|
|
immediately for all jobs running on the system.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QAUTOVRT</dt>
|
||
|
|
<dd>Determines whether the system should automatically create virtual devices.
|
||
|
|
This is used with display station pass-through and Telnet sessions.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QCCSID</dt>
|
||
|
|
<dd>The coded character set identifier, which identifies: <ul><li>A specific set of encoding scheme identifiers</li>
|
||
|
|
<li>Character set identifiers</li>
|
||
|
|
<li>Code page identifiers</li>
|
||
|
|
<li>Additional coding-related information that uniquely identifies the coded
|
||
|
|
graphic character representation needed by the system</li>
|
||
|
|
</ul>
|
||
|
|
<p>This value is based on the language that is installed on the system.
|
||
|
|
It determines whether data must be converted to a different format before
|
||
|
|
being presented to the user. The default value is 65535, which means this
|
||
|
|
data is not converted.</p>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QCTLSBSD</dt>
|
||
|
|
<dd>The controlling subsystem description</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QDSPSGNINF</dt>
|
||
|
|
<dd>Determines whether the sign-on information display shows after sign-on
|
||
|
|
by using the 5250 emulation functions (workstation function, PC5250).</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QLANGID</dt>
|
||
|
|
<dd>The default language identifier for the system. It determines the default
|
||
|
|
CCSID for a user's job if the job CCSID is 65535. The clients and servers
|
||
|
|
use this default job CCSID value to determine the correct conversion for data
|
||
|
|
that is exchanged between the client and the server.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QLMTSECOFR</dt>
|
||
|
|
<dd>Controls whether a user with all-object (*ALLOBJ) or service (*SERVICE)
|
||
|
|
special authority can use any device. If this value is set to 1, all users
|
||
|
|
with *ALLOBJ or *SERVICE special authorities must have specific *CHANGE authority
|
||
|
|
to use the device. <p>This affects virtual devices for 5250 emulation. The
|
||
|
|
shipped value for this is 1. If you want authorized users to sign-on to PCs,
|
||
|
|
you must either give them specific authority to the device and controller
|
||
|
|
that the PC uses or change this value to 0.</p>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QMAXSIGN</dt>
|
||
|
|
<dd>Controls the number of consecutive incorrect sign-on attempts by local
|
||
|
|
and remote users. Once the QMAXSIGN value is reached, the system determines
|
||
|
|
the action with the QMAXSGNACN system value. <p>If the QMAXSGNACN value is
|
||
|
|
1 (vary off device), the QMAXSIGN value does not affect a user who enters
|
||
|
|
an incorrect password on the PC when they are starting the connection.</p>
|
||
|
|
<p>This
|
||
|
|
is a potential security exposure for PC users. The QMAXSGNACN should be set
|
||
|
|
to either 2 or 3.</p>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QMAXSGNACN</dt>
|
||
|
|
<dd>Determines what the system does when the maximum number of sign-on attempts
|
||
|
|
is reached at any device. You can specify 1 (vary off device), 2 (disable
|
||
|
|
the user profile) or 3 (vary off device and disable the user profile). The
|
||
|
|
shipped value is 3.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDEXPITV</dt>
|
||
|
|
<dd>The number of days for which a password is valid. Changes that are made
|
||
|
|
to this system value take effect immediately.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDLMTAJC</dt>
|
||
|
|
<dd>Limits the use of adjacent numbers in a password. Changes that are made
|
||
|
|
to this system value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDLMTCHR</dt>
|
||
|
|
<dd>Limits the use of certain characters in a password. Changes that are made
|
||
|
|
to this system value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDLMTREP</dt>
|
||
|
|
<dd>Limits the use of repeating characters in a password. Changes that are
|
||
|
|
made to this system value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDLVL</dt>
|
||
|
|
<dd>Determines the level of password support for the system, which includes
|
||
|
|
the password length that the iSeries server will support, the type of encryption
|
||
|
|
used for passwords, and whether iSeries NetServer™ passwords for the Windows<sup>®</sup> clients
|
||
|
|
will be removed from the system. Changes that are made to this system value
|
||
|
|
take effect on the next IPL.<div class="attention"><span class="attentiontitle">Attention:</span> If you set this value to
|
||
|
|
support long passwords, you must upgrade all client PCs for long password
|
||
|
|
support (Express V5R1) before setting this value. Otherwise, all pre-V5R1
|
||
|
|
clients will be unable to log onto the iSeries server.</div>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDMAXLEN</dt>
|
||
|
|
<dd>The maximum number of characters in a password. Changes that are made
|
||
|
|
to this system value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDMINLEN</dt>
|
||
|
|
<dd>The minimum number of characters in a password. Changes that are made
|
||
|
|
to this system value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDPOSDIF</dt>
|
||
|
|
<dd>Controls the position of characters in a new password. Changes that are
|
||
|
|
made to this system value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDRQDDGT</dt>
|
||
|
|
<dd>Requires a number in a new password. Changes that are made to this system
|
||
|
|
value take effect the next time a password is changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDRQDDIF</dt>
|
||
|
|
<dd>Controls whether the password must be different than previous passwords.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QPWDVLDPGM</dt>
|
||
|
|
<dd>Password validation program name and library that are supplied by the
|
||
|
|
computer system. Both an object name and library name can be specified. Changes
|
||
|
|
that are made to this system value take effect the next time a password is
|
||
|
|
changed.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QRMTSIGN</dt>
|
||
|
|
<dd>Specifies how the system handles remote sign-on requests. A TELNET session
|
||
|
|
is actually a remote sign-on request. This value determines several actions,
|
||
|
|
as follows: <ul><li>'*FRCSIGNON': All remote sign-on sessions are required to go through normal
|
||
|
|
sign-on processing.</li>
|
||
|
|
<li>'*SAMEPRF': For 5250 display station pass-through or workstation function,
|
||
|
|
when the source and target user profile names are the same, the sign-on may
|
||
|
|
be bypassed for remote sign-on attempts. When using TELNET, the sign-on may
|
||
|
|
be bypassed.</li>
|
||
|
|
<li>'*VERIFY': After verifying that the user has access to the system, the
|
||
|
|
system allows the user to bypass the sign-on.</li>
|
||
|
|
<li>'*REJECT': Allows no remote sign-on for 5250 display station pass-through
|
||
|
|
or work station function. When QRMTSIGN is set to *REJECT, the user can still
|
||
|
|
sign-on to the system by using TELNET. These sessions will go through normal
|
||
|
|
processing. If you want to reject all TELNET requests to the system, end the
|
||
|
|
TELNET servers.</li>
|
||
|
|
<li>' <var class="varname">program library'</var>: The user can specify a program
|
||
|
|
and library (or *LIBL) to decide which remote sessions are allowed and which
|
||
|
|
user profiles can be automatically signed on from which locations. This option
|
||
|
|
is only valid for passthrough.</li>
|
||
|
|
</ul>
|
||
|
|
<p>This value also specifies a program name to run that determines which
|
||
|
|
remote sessions are to be allowed.</p>
|
||
|
|
<p>The shipped value is *FRCSIGNON.
|
||
|
|
If you want users to be able to use the bypass sign-on function of the 5250
|
||
|
|
emulator, change this value to *VERIFY.</p>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QSECURITY</dt>
|
||
|
|
<dd>System security level. Changes that are made to this system value take
|
||
|
|
effect at the next IPL. <ul><li>20 means that the system requires a password to sign-on.</li>
|
||
|
|
<li>30 means that the system requires password security at sign-on and object
|
||
|
|
security at each access. You must have authority to access all system resources.</li>
|
||
|
|
<li>40 means that the system requires password security at sign-on and object
|
||
|
|
security at each access. Programs that try to access objects through unsupported
|
||
|
|
interfaces fail.</li>
|
||
|
|
<li>50 means that the system requires password security at sign-on, and users
|
||
|
|
must have authority to access objects and system resources. The security and
|
||
|
|
integrity of the QTEMP library and user domain objects are enforced. Programs
|
||
|
|
that try to access objects through interfaces that are not supported or that
|
||
|
|
try to pass unsupported parameter values to supported interfaces will fail.</li>
|
||
|
|
</ul>
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QSTRUPPGM</dt>
|
||
|
|
<dd>The program that runs when the controlling subsystem starts or when the
|
||
|
|
system starts. This program performs set up functions such as starting subsystems.</dd>
|
||
|
|
</dl>
|
||
|
|
<dl><dt class="dlterm">QSYSLIBL</dt>
|
||
|
|
<dd>The system part of the library list. This part of the library list is
|
||
|
|
searched before any other part. Some client functions use this list to search
|
||
|
|
for objects.</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaiimst27.htm" title="Describes the client/server communication process, and how to manage it. Additionally, this topic lists relevant iSeries system values and subsystems, and describes how to identify, display and manage server jobs on the iSeries.">Use i5/OS host servers</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|