TS/MP 2.5 System Management Manual

This example specifies that a maximum of 16 link manager (LINKMON/ACS subsystem) processes
can access your PATHMON environment:
= SET PATHWAY MAXLINKMONS 16
If you have Pathsend processes in other systems that need to access server classes in your PATHMON
environment, setting the MAXLINKMONS attribute to the number of CPUs in your system might not
be correct.
NOTE: If the MAXLINKMONS attribute is set to 0, any attempt by a Pathsend process to perform
a server-class send operation to a server class in the PATHMON environment fails. The default
value of the MAXLINKMONS attribute is 0.
Specifying Security
For PATHMON environments that use Pathsend, there are two levels of security to consider:
• Network-level security
• Server-class-level security
Network Level Security
For Pathsend processes to access server processes, this network conditions must be met:
• The link manager (LINKMON/ACS subsystem) process must be able to open the PATHMON
process (to make link requests).
• The link manager (LINKMON/ACS subsystem) process must be able to open the server
processes (to send user requests).
• The PATHMON process must be able to open the server processes (to send startup messages).
All of these opens are performed using the PATHMON process’s user ID. Therefore, the user ID of
the PATHMON process controlling the server class must have corresponding user IDs on—and
remote passwords with—these systems:
• The system of the Pathsend process
• The PATHMON process’s system
• The server class’s system
Server Class Security
To configure servers for access by Pathsend processes, you use the SET SERVER command to
define attributes for the OWNER and SECURITY parameters. Together, the OWNER and SECURITY
parameters define whether a Pathsend process can access a server class.
Link manager (LINKMON/ACS subsystem) processes perform authorization checks on each send
to make sure that the user ID of the Pathsend process at the time of the send conforms to the SERVER
OWNER and SERVER SECURITY attributes.
(Note that TCPs running under the Pathway/iTS product ignore these parameters; the parameters
only affect Pathsend process access.)
OWNER
The SERVER OWNER parameter defines the user ID that controls access to the server class from a
Pathsend process.
The user ID you assign must be known to the system in which PATHCOM is running. You define
the user ID either with a system number, group number, and user number, or with a system name,
group name, and user name.
For example, these commands set the SERVER OWNER attribute to the user ID of the super user
on the system 222 or \ABC, respectively:
112 Managing the Pathsend Environment