NET/MASTER Management Services (MS) System Management Guide

Configuring Security Exit Processes
Configuring the Processing Environment
115414 NonStop NET/MASTER MS System Management Guide 11–15
Note In this example, the argument of the PROCESSPARAM operand is split over several lines; in practice, the
command and argument must reside on the same line in the CONFIG file.
You can improve performance by configuring NonStop NET/MASTER MS to run one
copy of the same security exit program in each CPU. Each NonStop NET/MASTER
MS process accesses multiple security exits in a circular fashion.
Note If a security process fails, NonStop NET/MASTER MS no longer uses that security exit, even when it is
restarted. (NonStop NET/MASTER MS itself does not restart security exit processes that fail.) This
prevents someone from deliberately stopping a security exit and replacing it with their own version of it.
Therefore, Tandem strongly recommends that you configure NonStop NET/MASTER MS to start more
than one copy of the security exit program, or that you run one security exit as a process pair. The
security exit distributed by Tandem runs as a process pair.
Defining an Externally
Started Security Exit
Process
A NonStop NET/MASTER MS system can use a security exit process that was started
by a means other than its own NCP. This allows NonStop NET/MASTER MS to share
a security exit process with other systems that also use the security exit process.
Use the SECEXIT operand to specify the name of an externally-started security exit
process that you want to use. Specify SECEXIT as a process name of one through five
characters, including the dollar sign ($) that begins the process name. For example, to
instruct a NonStop NET/MASTER MS system to use a security exit process named
$ASEC, include the following command in the CONFIG file:
PARAM SECEXIT=$ASEC
If you cannot define all available, externally started security exit process names in one
line, repeat the PARAM SECEXIT command to specify additional names. Each
process name must be unique.