The timeout interval action system value specifies what the system does when a job reaches the timeout interval.
If you select end the job, the system ends any job that has been inactive longer than the specified timeout interval . You can also choose to disconnect the inactive job or specify the name of a message queue, to which the system sends a warning message when a job has been inactive too long. When working with interactive jobs, this system value works with the timeout interval system value to determine the action taken after the specified time has elapsed.
See Quick reference table for an overview of the timeout interval action system value.
| iSeries™ Navigator | Character-based interface | Description |
|---|---|---|
| End job | *ENDJOB | Inactive jobs are ended. If the inactive job is a group job, all jobs associated with the group are also ended. If the job is part of a secondary job, both jobs are ended. |
| Disconnect job | *DSCJOB | The inactive job is disconnected, as are any secondary or group jobs associated with it. If the job cannot be disconnected, the job will be ended. The disconnected job timeout interval system value controls whether the system eventually ends disconnected jobs. |
| Send message | message-queue-name | Message CPI1126 is sent to the specified message queue when the inactive job timeout interval is reached. This message states: Job &3/&2/&1;has not been active . |
Relationship to security policy
Within your security policy you should inform users your company's expectations for managing their signon activities. Inactive jobs pose a potential risk to system resources because someone could gain access to your system through an inactive terminal. However, normal job duties often interrupt users at their workstations, so you need to provide some flexibility for these expected interruptions. Using the interactive job system values provide a means to maintain security of system resources and provide users flexibility to perform all their job responsibilities. Your security policy should state expectations for users regarding signon activities to both their workstations and to system to which they have access. For example, users are expected to password protected their workstations and enable password protection every time they leave their workstation. If they need to leave their workstation while performing a job on the system, locking their workstation provides a first barrier to anyone who tries to gain access to your system through that workstation. However, password protection is only the first line of defense. Use the interactive job system values to ensure that malicious users do not gain access to system resources.
If a job exceeds the timeout interval for inactive jobs, the system takes the specified timeout interval action. If this action is to disconnect the job, the system also waits until the timeout interval for disconnected jobs has elapsed before ending the job. Assume that you have set the inactive job timeout to 30 minutes and the disconnected job timeout interval to 300 minutes, or 5 hours. If a user forgets to signoff at 9:30 a.m., the system disconnects that job at 10:00 a.m. and ends the job at 3:00 p.m.
When the system ends or disconnects a job, any data on the user's display that has not yet been entered into the system will be lost. If the user signs on to the same workstation before the disconnected job timeout elapses, then the job resumes from the point where the system disconnected the job.
| iSeries Navigator name | When job reaches timeout |
|---|---|
| Character-based interface name | QINACTMSGQ |
| Authority | All object access (*ALLOBJ) Note: The Security Officer (QSECOFR) user profile is shipped with
these authorities.
|
| How to access | iSeries Navigator
Character-based interface
|
| Changes take effect | Immediately |
| Default value | End job |
| Recommended value | Use disable job value unless your users run iSeries Access jobs. Disabling a job when some iSeries Access jobs are running is the equivalent of ending the jobs, which can cause significant loss of information. Use the message-queue option if you have the iSeries Access licensed program. See Chapter 8, "Working with Messages" of the CL Programming book shows an example of writing a program to handle messages. |
| Lockable | Yes |
| Special considerations | This system value is used with the timeout interval for inactive jobs and the timeout interval for disconnected jobs system values. Together these system values ensure that inactive and disconnected jobs are ended properly. |
For more detailed information about this security value, see Chapter 3, "Security System Values" in Security Reference.