Timeout interval for inactive jobs

The timeout interval for inactive jobs system value specifies in minutes how long the system allows a job to be inactive before taking action.

A workstation is considered inactive if it is waiting at a menu or display, or if it is waiting for message input with no user interaction. User interaction includes using the Enter key, paging functions, function keys, and help functions.

The system determines which jobs are inactive. For example if a user starts a second interactive job at the same display device, then any interaction such as the pressing the Enter key on either job causes both jobs to be marked as active.

The timeout interval for inactive jobs system value works with the system value that determines what action the system takes when an inactive job exceeds the specified interval. For information of the related system value, see Timeout interval action. When the system is started, it checks for inactive jobs that are at or exceeds the timeout interval. If a system is started at 9:30 in the morning and the timeout interval is set at 30 minutes, the system will check for inactive jobs at 10:00, 10:30, 11:00, and so on. If it discovers a job that has been inactive for 30 minutes or more, it takes the action specified by the timeout interval action system value. These two system values provide security by preventing users from leaving inactive workstations signed on. An inactive workstation might allow an unauthorized person access to the system.

See Quick reference table for an overview of the timeout interval for inactive jobs system value.

Relationship to security policy

Within your security policy you should inform users your company's expectations for managing their signon activities. Inactive jobs pose a potential risk to system resources because someone could gain access to your system through an inactive terminal. However, normal job duties often interrupt users at their workstations, so you need to provide some flexibility for these expected interruptions. Using the interactive job system values provide a means to maintain security of system resource and provide user's flexibility to perform all their job responsibilities. Your security policy should state expectations for users regarding signon activities to both their workstations and to system to which they have access. For example, users are expected to password protected their workstations and enable password protection every time they leave their workstation. If they need to leave their workstation while performing a job on the system, locking their workstation provides a first barrier to anyone who tries to gain access to your system through that workstation. However, password protection is only the first line of defense. Use the interactive job system values to ensure that malicious users do not gain access to system resources.

If a job exceeds the timeout interval for inactive jobs, the system will take the specified timeout interval action. If this action is to disconnect the job, the system will wait until the timeout interval has elapsed before disconnecting the job. If this action is to end the job, the system will wait until the timeout interval has elapsed before ending the job. Assume you have set the inactive job timeout interval to 30 minutes and the inactive job action to disconnect the job. Also assume that the disconnected job timeout interval is 300 minutes or 5 hours. If a user forgets to signoff at 9:30 a.m., the system disconnects her job at 10:00 a.m. and will end the job at 3:00 p.m.

When the system ends the disconnected job, any data on the user's display that has not yet been entered into the system will be lost. If the user signs on to the same workstation before the disconnected job timeout elapses, then the job resumes from the point where the system disconnected the job.

For more in-depth information about this security value, see Chapter 3, "Security System Values" in Security Reference.