NET/MASTER Management Services (MS) System Management Guide

Configuring Security Exit Processes
Configuring the Processing Environment
11–14 115414 NonStop NET/MASTER MS System Management Guide
Configuring Security
Exit Processes
NonStop NET/MASTER MS requires one or more security exit processes in all
operating modes; it cannot start without one. The security exit process determines
whether a user has sufficient command authority to use an external utility and
members of the utility’s command set. It also determines whether a user can execute
the OPSYS or PROGRUN command to communicate with a utility.
NonStop NET/MASTER MS can use an internally or externally started security exit.
Configuring an Internally
Started Security Exit
Process
Usually, NonStop NET/MASTER MS starts the security exit that it uses. The
following table lists the mandatory (M) and optional (O) PARAM command operands
used for an internally started security exit process definition:
Operand Use Purpose
PROCESSOBJECT M Specifies the program file name. This operand is normally first in
the process definition.
PROCESSCPU O Specifies primary and backup CPUs.
PROCESSNAME M Specifies the process name.
PROCESSPARAM M Specifies startup parameters, which specify these values (in order):
Backup CPU
Location of customized external utility definition file
Location of distributed external utility definition file
Location of customized command set definition file
Location of distributed command set definition file
Location of distributed Console Extras file
Location of customized Console Extras file
PROCESSPRIORITY O Specifies process priority.
PROCESSSWAPVOL O Specifies a swap volume.
SECEXITPROCESS M Specifies the process type and logical name. Specify a unique
name of 1 through 12 characters. This operand must be last in the
process definition.
Note The security exit uses a unique syntax for specifying the backup CPU. The second CPU specified as an
argument to the PROCESSCPU operand, normally the backup CPU assignment, is ignored. The backup
CPU is specified as the first argument of the PROCESSPARAM operand.
An example security exit process definition follows:
PARAM PROCESSOBJECT=$DATA.ZNNM.SECEXIT
PARAM PROCESSNAME=$ZNN0
PARAM PROCESSPRIORITY=198
PARAM PROCESSCPU=(9,10)
PARAM PROCESSPARAM="10 $DATA.ZNNMDATA.ZUACUTIL
$DATA.ZNNMDATA.UADUTIL
$DATA.ZNNMDATA.ZUACAUTH
$DATA.ZNNMDATA.UADAUTH
$DATA.ZNNMDATA.CEXDCF
$DATA.ZNNMDATA.ZCEXCCF"
PARAM SECEXITPROCESS=SECEXIT