166 lines
9.9 KiB
HTML
166 lines
9.9 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Timeout interval action" />
|
||
|
|
<meta name="abstract" content="The timeout interval action system value specifies what the system does when a job reaches the timeout interval." />
|
||
|
|
<meta name="description" content="The timeout interval action system value specifies what the system does when a job reaches the timeout interval." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvplansyslvlsec.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="qinatmsgq" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Timeout interval action</title>
|
||
|
|
</head>
|
||
|
|
<body id="qinatmsgq"><a name="qinatmsgq"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Timeout interval action</h1>
|
||
|
|
<div><p>The timeout interval action system value specifies what the system
|
||
|
|
does when a job reaches the timeout interval.</p>
|
||
|
|
<p>If you select end the job, the system ends any job that has been inactive
|
||
|
|
longer than the specified timeout interval . You can also choose to disconnect
|
||
|
|
the inactive job or specify the name of a message queue, to which the system
|
||
|
|
sends a warning message when a job has been inactive too long. When working
|
||
|
|
with interactive jobs, this system value works with the timeout interval system
|
||
|
|
value to determine the action taken after the specified time has elapsed.</p>
|
||
|
|
<p>See <a href="#qinatmsgq__quickref">Quick reference</a> table
|
||
|
|
for an overview of the timeout interval action system value.</p>
|
||
|
|
<div class="p">
|
||
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" frame="border" border="1" rules="all"><caption>Table 1. Possible values for the timeout interval action
|
||
|
|
system value</caption><thead align="left"><tr valign="bottom"><th valign="bottom" id="d0e29">iSeries™ Navigator</th>
|
||
|
|
<th valign="bottom" id="d0e33">Character-based interface</th>
|
||
|
|
<th valign="bottom" id="d0e35">Description</th>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<tbody><tr><td valign="top" headers="d0e29 ">End job</td>
|
||
|
|
<td valign="top" headers="d0e33 ">*ENDJOB</td>
|
||
|
|
<td valign="top" headers="d0e35 ">Inactive jobs are ended. If the inactive job is a group
|
||
|
|
job, all jobs associated with the group are also ended. If the job is part
|
||
|
|
of a secondary job, both jobs are ended.</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e29 "><span>Disconnect job</span></td>
|
||
|
|
<td valign="top" headers="d0e33 ">*DSCJOB</td>
|
||
|
|
<td valign="top" headers="d0e35 ">The inactive job is disconnected, as are any secondary
|
||
|
|
or group jobs associated with it. If the job cannot be disconnected, the job
|
||
|
|
will be ended. The <a href="rzamvqdscjobitv.htm">disconnected job timeout interval</a> system value controls
|
||
|
|
whether the system eventually ends disconnected jobs.</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e29 ">Send message</td>
|
||
|
|
<td valign="top" headers="d0e33 "><em>message-queue-name</em></td>
|
||
|
|
<td valign="top" headers="d0e35 ">Message CPI1126 is sent to the specified message queue
|
||
|
|
when the inactive job timeout interval is reached. This message states: Job &3/&2/&1;has
|
||
|
|
not been active .</td>
|
||
|
|
</tr>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<p><span class="uicontrol">Relationship to security policy</span></p>
|
||
|
|
<p>Within your security policy you should inform users your company's expectations
|
||
|
|
for managing their signon activities. Inactive jobs pose a potential risk
|
||
|
|
to system resources because someone could gain access to your system through
|
||
|
|
an inactive terminal. However, normal job duties often interrupt users at
|
||
|
|
their workstations, so you need to provide some flexibility for these expected
|
||
|
|
interruptions. Using the interactive job system values provide a means to
|
||
|
|
maintain security of system resources and provide users flexibility to perform
|
||
|
|
all their job responsibilities. Your security policy should state expectations
|
||
|
|
for users regarding signon activities to both their workstations and to system
|
||
|
|
to which they have access. For example, users are expected to password protected
|
||
|
|
their workstations and enable password protection every time they leave their
|
||
|
|
workstation. If they need to leave their workstation while performing a job
|
||
|
|
on the system, locking their workstation provides a first barrier to anyone
|
||
|
|
who tries to gain access to your system through that workstation. However,
|
||
|
|
password protection is only the first line of defense. Use the interactive
|
||
|
|
job system values to ensure that malicious users do not gain access to system
|
||
|
|
resources.</p>
|
||
|
|
<p>If a job exceeds the timeout interval for inactive jobs, the
|
||
|
|
system takes the specified timeout interval action. If this action is to disconnect
|
||
|
|
the job, the system also waits until the timeout interval for disconnected
|
||
|
|
jobs has elapsed before ending the job. Assume that you have set the inactive
|
||
|
|
job timeout to 30 minutes and the disconnected job timeout interval to 300
|
||
|
|
minutes, or 5 hours. If a user forgets to signoff at 9:30 a.m., the system
|
||
|
|
disconnects that job at 10:00 a.m. and ends the job at 3:00 p.m.</p>
|
||
|
|
<p>When the system ends or disconnects a job, any data on the user's
|
||
|
|
display that has not yet been entered into the system will be lost. If the
|
||
|
|
user signs on to the same workstation before the disconnected job timeout
|
||
|
|
elapses, then the job resumes from the point where the system disconnected
|
||
|
|
the job.</p>
|
||
|
|
<div class="p">
|
||
|
|
<div class="tablenoborder"><a name="qinatmsgq__quickref"><!-- --></a><table cellpadding="4" cellspacing="0" summary="" id="qinatmsgq__quickref" frame="border" border="1" rules="all"><caption>Table 2. Quick Reference. Provides details
|
||
|
|
for the timeout interval action system value.</caption><thead align="left"><tr valign="bottom"><th valign="bottom" id="d0e85">iSeries Navigator name</th>
|
||
|
|
<th valign="bottom" id="d0e89">When job reaches timeout</th>
|
||
|
|
</tr>
|
||
|
|
</thead>
|
||
|
|
<tbody><tr><td valign="top" headers="d0e85 ">Character-based interface name</td>
|
||
|
|
<td valign="top" headers="d0e89 ">QINACTMSGQ</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 ">Authority</td>
|
||
|
|
<td valign="top" headers="d0e89 "><p>All object access (*ALLOBJ)<br />
|
||
|
|
Security administrator (*SECADM)</p>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> The Security Officer (QSECOFR) user profile is shipped with
|
||
|
|
these authorities. </div>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 ">How to access</td>
|
||
|
|
<td valign="top" headers="d0e89 "><div class="p"><strong>iSeries Navigator</strong><ol><li>Expand <span class="menucascade"><span class="uicontrol">Configuration and Service</span> > <span class="uicontrol">System
|
||
|
|
Values</span></span>.</li>
|
||
|
|
<li>Right click <span class="uicontrol">Jobs</span> and select <span class="uicontrol">Properties</span>.</li>
|
||
|
|
<li>On the <span class="uicontrol">Interactive Jobs</span> page, you will find the
|
||
|
|
option for timeout interval action .</li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
<div class="p"><strong>Character-based interface</strong><ol><li>In the character-based interface, type <samp class="codeph">WRKSYSVAL QINACTMSGQ</samp>.</li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 ">Changes take effect</td>
|
||
|
|
<td valign="top" headers="d0e89 ">Immediately</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 ">Default value</td>
|
||
|
|
<td valign="top" headers="d0e89 ">End job</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 ">Recommended value</td>
|
||
|
|
<td valign="top" headers="d0e89 ">Use disable job value unless your users run iSeries Access
|
||
|
|
jobs. Disabling a job when some iSeries Access jobs are running is the
|
||
|
|
equivalent of ending the jobs, which can cause significant loss of information.
|
||
|
|
Use the message-queue option if you have the iSeries Access licensed program. See
|
||
|
|
Chapter 8, "Working with Messages" of the <a href="../rbam6/rbam6.pdf" target="_blank">CL Programming</a> book shows an example of writing a program
|
||
|
|
to handle messages.</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 "><a href="rzamvlockdown.htm">Lockable</a></td>
|
||
|
|
<td valign="top" headers="d0e89 ">Yes</td>
|
||
|
|
</tr>
|
||
|
|
<tr><td valign="top" headers="d0e85 ">Special considerations </td>
|
||
|
|
<td valign="top" headers="d0e89 ">This system value is used with the <a href="rzamvqinactitv.htm">timeout interval</a> for
|
||
|
|
inactive jobs and the <a href="rzamvqdscjobitv.htm">timeout interval for disconnected jobs</a> system values.
|
||
|
|
Together these system values ensure that inactive and disconnected jobs are
|
||
|
|
ended properly. </td>
|
||
|
|
</tr>
|
||
|
|
</tbody>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<p>For more detailed information about this security value, see Chapter 3, <span class="q">"Security
|
||
|
|
System Values"</span> in <a href="../books/sc415302.pdf" target="_blank">Security Reference</a>.</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvplansyslvlsec.htm" title="System security entails controlling user access and their privileges, maintaining information integrity, monitoring processes and access, auditing system functions, and providing backup and recovery of security related information.">Plan system security</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|