159 lines
9.5 KiB
HTML
159 lines
9.5 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
|||
|
|
<!DOCTYPE html
|
|||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|||
|
|
<html lang="en-us" xml:lang="en-us">
|
|||
|
|
<head>
|
|||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|||
|
|
<meta name="security" content="public" />
|
|||
|
|
<meta name="Robots" content="index,follow" />
|
|||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|||
|
|
<meta name="DC.Type" content="concept" />
|
|||
|
|
<meta name="DC.Title" content="Timeout interval for disconnected jobs" />
|
|||
|
|
<meta name="abstract" content="Timeout interval for disconnected jobs system value specifies how long a disconnected job can be inactive before the job is ended and the action to take when a job reaches timeout." />
|
|||
|
|
<meta name="description" content="Timeout interval for disconnected jobs system value specifies how long a disconnected job can be inactive before the job is ended and the action to take when a job reaches timeout." />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvplansyslvlsec.htm" />
|
|||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Format" content="XHTML" />
|
|||
|
|
<meta name="DC.Identifier" content="qdscjobitv" />
|
|||
|
|
<meta name="DC.Language" content="en-us" />
|
|||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|||
|
|
<!-- US Government Users Restricted Rights -->
|
|||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|||
|
|
<title>Timeout interval for disconnected jobs</title>
|
|||
|
|
</head>
|
|||
|
|
<body id="qdscjobitv"><a name="qdscjobitv"><!-- --></a>
|
|||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|||
|
|
<h1 class="topictitle1">Timeout interval for disconnected jobs</h1>
|
|||
|
|
<div><p>Timeout interval for disconnected jobs system value specifies how
|
|||
|
|
long a disconnected job can be inactive before the job is ended and the action
|
|||
|
|
to take when a job reaches timeout.</p>
|
|||
|
|
<p>If you set the timeout interval action for inactive jobs to disconnect
|
|||
|
|
inactive jobs, you should set the timeout for disconnected jobs to end the
|
|||
|
|
jobs eventually.</p>
|
|||
|
|
<p>A disconnected job uses up system resources, as well as retaining any locks
|
|||
|
|
on objects. To prevent two users from trying to change the same information
|
|||
|
|
at the same time, the system locks a record before updating it. Any locks
|
|||
|
|
on resources remain in effect when a the system disconnects a user’s job.
|
|||
|
|
Depending on your application design and the number of users on the system,
|
|||
|
|
locks may cause performance problems on your system. Check with your programmer
|
|||
|
|
or application provider to determine if locking may impact your performance. </p>
|
|||
|
|
<p>See <a href="#qdscjobitv__quickref">Quick reference</a> table
|
|||
|
|
for an overview of the timeout interval for disconnected jobs system value. </p>
|
|||
|
|
<div class="p">
|
|||
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" frame="border" border="1" rules="all"><caption>Table 1. Possible values for the timeout interval for
|
|||
|
|
disconnected jobs system value</caption><thead align="left"><tr valign="bottom"><th valign="bottom" id="d0e31">iSeries™ Navigator </th>
|
|||
|
|
<th valign="bottom" id="d0e35">Character-based interface</th>
|
|||
|
|
<th valign="bottom" id="d0e37">Description</th>
|
|||
|
|
</tr>
|
|||
|
|
</thead>
|
|||
|
|
<tbody><tr><td valign="top" headers="d0e31 ">Timeout interval (5-1,440) minutes</td>
|
|||
|
|
<td valign="top" headers="d0e35 "><em>time-in-minutes</em></td>
|
|||
|
|
<td valign="top" headers="d0e37 ">Specify a value between 5 and 1,440 minutes. </td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e31 ">Do not timeout</td>
|
|||
|
|
<td valign="top" headers="d0e35 ">*NONE</td>
|
|||
|
|
<td valign="top" headers="d0e37 ">The system does not automatically end a disconnected
|
|||
|
|
job. To retain system performance and unlock objects, you may need to manually
|
|||
|
|
end jobs.</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e31 ">No selections</td>
|
|||
|
|
<td valign="top" headers="d0e35 ">240</td>
|
|||
|
|
<td valign="top" headers="d0e37 ">If you do not select either option, the system will
|
|||
|
|
use the default value of 240 minutes to end a disconnected job.</td>
|
|||
|
|
</tr>
|
|||
|
|
</tbody>
|
|||
|
|
</table>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<p><strong>Relationship to security policy</strong></p>
|
|||
|
|
<p>Within your security policy you should inform users your company's expectations
|
|||
|
|
for managing their signon activities. Inactive jobs pose a potential risk
|
|||
|
|
to system resources because someone could gain access to your system through
|
|||
|
|
an inactive terminal. However, normal job duties often interrupt users at
|
|||
|
|
their workstations, so you need to provide some flexibility for these expected
|
|||
|
|
interruptions. Using the interactive job system values provide a means to
|
|||
|
|
maintain security of system resource and provide user's flexibility to perform
|
|||
|
|
all their job responsibilities. Your security policy should state expectations
|
|||
|
|
for users regarding signon activities to both their workstations and to system
|
|||
|
|
to which they have access. For example, users are expected to password protected
|
|||
|
|
their workstations and enable password protection every time they leave their
|
|||
|
|
workstation. If they need to leave their workstation while performing a job
|
|||
|
|
on the system, locking their workstation provides a first barrier to anyone
|
|||
|
|
who tries to gain access to your system through that workstation. However,
|
|||
|
|
password protection is only the first line of defense. Use the interactive
|
|||
|
|
job system values to ensure that malicious users do not gain access to system
|
|||
|
|
resources. </p>
|
|||
|
|
<p>If a job exceeds the timeout interval for inactive jobs, the
|
|||
|
|
system will take the specified timeout interval action. If this action is
|
|||
|
|
to disconnect the job, the system will wait until the timeout interval has
|
|||
|
|
elapsed before disconnecting the job. If a job also exceeds the timeout interval
|
|||
|
|
for disconnected jobs, the system will end the job. Assume you have set the
|
|||
|
|
inactive job timeout interval to 30 minutes and the disconnected job timeout
|
|||
|
|
interval to 300 minutes or 5 hours. If a user forgets to signoff at 9:30 a.m.,
|
|||
|
|
the system disconnects her job at 10:00 a.m. and will end the job at 3:00
|
|||
|
|
p.m.</p>
|
|||
|
|
<p>When the system ends the disconnected job, any data on the user's display
|
|||
|
|
that has not yet been entered into the system will be lost. If the user signs
|
|||
|
|
on to the same workstation before the disconnected job timeout elapses, then
|
|||
|
|
the job resumes from the point where the system disconnected the job.</p>
|
|||
|
|
<div class="p">
|
|||
|
|
<div class="tablenoborder"><a name="qdscjobitv__quickref"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="qdscjobitv__quickref" frame="border" border="1" rules="all"><caption>Table 2. Quick Reference. Provides details
|
|||
|
|
for the timeout interval for disconnected jobs system value.</caption><thead align="left"><tr valign="bottom"><th valign="bottom" id="d0e82">iSeries Navigator name</th>
|
|||
|
|
<th valign="bottom" id="d0e86">Disconnected jobs</th>
|
|||
|
|
</tr>
|
|||
|
|
</thead>
|
|||
|
|
<tbody><tr><td valign="top" headers="d0e82 ">Character-based interface name</td>
|
|||
|
|
<td valign="top" headers="d0e86 ">QDSCJOBITV</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 ">Authority</td>
|
|||
|
|
<td valign="top" headers="d0e86 ">None</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 ">How to access</td>
|
|||
|
|
<td valign="top" headers="d0e86 "><div class="p"><strong>iSeries Navigator</strong><ol><li>Expand <span class="menucascade"><span class="uicontrol">Configuration and Service</span> > <span class="uicontrol">System
|
|||
|
|
Values</span></span>.</li>
|
|||
|
|
<li>Right click <strong>Jobs</strong> and select <strong>Properties</strong>.</li>
|
|||
|
|
<li>On the <strong>Interactive Jobs</strong> page, you will find the option for timeout
|
|||
|
|
interval for disconnected jobs.</li>
|
|||
|
|
</ol>
|
|||
|
|
</div>
|
|||
|
|
<div class="p"><strong>Character-based interface</strong><ol><li>In the character-based interface, type <samp class="codeph">WRKSYSVAL QDSCJOBITV</samp>.</li>
|
|||
|
|
</ol>
|
|||
|
|
</div>
|
|||
|
|
</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 ">Changes take effect</td>
|
|||
|
|
<td valign="top" headers="d0e86 ">Immediately</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 ">Default value</td>
|
|||
|
|
<td valign="top" headers="d0e86 ">240</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 ">Recommended value</td>
|
|||
|
|
<td valign="top" headers="d0e86 ">300</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 "><a href="rzamvlockdown.htm">Lockable</a></td>
|
|||
|
|
<td valign="top" headers="d0e86 ">Yes</td>
|
|||
|
|
</tr>
|
|||
|
|
<tr><td valign="top" headers="d0e82 ">Special considerations </td>
|
|||
|
|
<td valign="top" headers="d0e86 ">This system value is used with the <a href="rzamvqinactitv.htm">timeout interval</a> for
|
|||
|
|
inactive jobs and the <a href="rzamvqinatmsgq.htm">timeout interval action</a> system values. Together these
|
|||
|
|
system values ensure that inactive and disconnected jobs are ended properly. </td>
|
|||
|
|
</tr>
|
|||
|
|
</tbody>
|
|||
|
|
</table>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<p>For more in-depth information about this security value, see Chapter 3, <span class="q">"Security
|
|||
|
|
System Values"</span> in <a href="../books/sc415302.pdf" target="_blank">Security
|
|||
|
|
Reference</a>. </p>
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
<div class="familylinks">
|
|||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvplansyslvlsec.htm" title="System security entails controlling user access and their privileges, maintaining information integrity, monitoring processes and access, auditing system functions, and providing backup and recovery of security related information.">Plan system security</a></div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</body>
|
|||
|
|
</html>
|