71 lines
5.9 KiB
HTML
71 lines
5.9 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
|||
|
|
<!DOCTYPE html
|
|||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|||
|
|
<html lang="en-us" xml:lang="en-us">
|
|||
|
|
<head>
|
|||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|||
|
|
<meta name="security" content="public" />
|
|||
|
|
<meta name="Robots" content="index,follow" />
|
|||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|||
|
|
<meta name="DC.Type" content="concept" />
|
|||
|
|
<meta name="DC.Title" content="Set up APPC security" />
|
|||
|
|
<meta name="abstract" content="This group of articles discuss various aspects of setting up security for APPC sessions." />
|
|||
|
|
<meta name="description" content="This group of articles discuss various aspects of setting up security for APPC sessions." />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvsetnetsec.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvappcrestrict.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvappcjobs.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvappcpassthru.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvappcdevice.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvappcremotecmd.htm" />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvappcevaluate.htm" />
|
|||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Format" content="XHTML" />
|
|||
|
|
<meta name="DC.Identifier" content="appcsetup" />
|
|||
|
|
<meta name="DC.Language" content="en-us" />
|
|||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|||
|
|
<!-- US Government Users Restricted Rights -->
|
|||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|||
|
|
<title>Set up APPC security</title>
|
|||
|
|
</head>
|
|||
|
|
<body id="appcsetup"><a name="appcsetup"><!-- --></a>
|
|||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|||
|
|
<h1 class="topictitle1">Set up APPC security</h1>
|
|||
|
|
<div><p>This group of articles discuss various aspects of setting up security for APPC sessions.</p>
|
|||
|
|
<div class="p">There are several aspects of security for an i5/OS™ system, communicating with each other using APPC and APPN: <ul><li><span class="uicontrol">Physical security</span> surrounding the systems, communication lines, and display stations that can be configured.</li>
|
|||
|
|
<li><span class="uicontrol">Location security</span> that verifies the identity of other systems in the network.</li>
|
|||
|
|
<li><span class="uicontrol">User security</span> that verifies the identity and rights of users to issue commands on their local system and remote systems when you specify *NONE for the location password (LOCPWD) parameter during APPC configuration.</li>
|
|||
|
|
<li><span class="uicontrol">Resource security</span> that controls user access to particular resources, such as confidential databases remote system when a session is being established.</li>
|
|||
|
|
<li><span class="uicontrol">Session-level security</span> which is achieved by specifying a password on the LOCPWD parameter during configuration. The i5/OS system uses the password to validate the identity of the remote system when a session is being established.</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
<p>When the system is using level 10 security, APPC connects to the network as a nonsecure system. The i5/OS system does not validate the identity of a remote system when a session is being established and does not require transaction security on incoming program start requests.</p>
|
|||
|
|
<p>If the i5/OS system is the remote system and is using level 20 or above, APPC connects to the network as a secure system.</p>
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
<ul class="ullinks">
|
|||
|
|
<li class="ulchildlink"><strong><a href="rzamvappcrestrict.htm">Restrict APPC sessions</a></strong><br />
|
|||
|
|
Use object authority to control access to APPC sessions.</li>
|
|||
|
|
<li class="ulchildlink"><strong><a href="rzamvappcjobs.htm">Target system assignment of user profiles for jobs</a></strong><br />
|
|||
|
|
When a user requests an APPC job on another system, the request has a mode name associated with it. The mode name might come from the user’s request, or it might be a default value from the network attributes of the source system.</li>
|
|||
|
|
<li class="ulchildlink"><strong><a href="rzamvappcpassthru.htm">Display station passthrough options</a></strong><br />
|
|||
|
|
Display station passthrough is an example of an application that uses APPC communications. You can use display station passthrough to sign on to another system that is connected to your system through a network.</li>
|
|||
|
|
<li class="ulchildlink"><strong><a href="rzamvappcdevice.htm">Avoid unexpected device assignments</a></strong><br />
|
|||
|
|
When a failure occurs on an active device, the system attempts to recover. In some circumstances, when the connection is broken, another user can unintentionally reestablish the session that had the failure.</li>
|
|||
|
|
<li class="ulchildlink"><strong><a href="rzamvappcremotecmd.htm">Control remote commands and batch jobs</a></strong><br />
|
|||
|
|
Several options are available to help you control which remote commands and jobs can run on your system.</li>
|
|||
|
|
<li class="ulchildlink"><strong><a href="rzamvappcevaluate.htm">Evaluate your APPC configuration</a></strong><br />
|
|||
|
|
You can use the Print Communications Security (<span class="cmdname">PRTCMNSEC</span>)
|
|||
|
|
command or menu options to print the security-relevant values in your APPC
|
|||
|
|
configuration. </li>
|
|||
|
|
</ul>
|
|||
|
|
|
|||
|
|
<div class="familylinks">
|
|||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvsetnetsec.htm" title="The following topics provide security recommendations for TCP/IP protocols, such as FTP, BOOTP, and VPN; and for APPC.">Set up network security</a></div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</body>
|
|||
|
|
</html>
|