14.4.1 Setting the procedure for restricting connections to JP1/AJS3

(1) Setting the procedure

1. Copy the model file of the connection permission configuration file to the environment settings file storage directory.

   For details about the model file and the environment settings file storage directory, see (3) The connection permission configuration file.

2. Change the name of the copied file to the specified name.

   For details about the file names, see (3) The connection permission configuration file.

3. Use an editor such as vi to edit the file.

   Set the IP address of the hosts that you want to permit to connect in the connection permission configuration file.

   For details about how to set the connection permission configuration file, see 14.4.2 How to set the connection permission configuration file.

4. Change the access permission of the connection permission configuration file.

   The access permission of the model file is inherited as the permission of the storage directory. You need to change the access permission of the file so that general users will not be able to access or edit the file.

5. Stop the JP1/AJS3 service.

   Execute the following commands to confirm that all processes have stopped:

   # /etc/opt/jp1ajs2/jajs_stop
   # /opt/jp1ajs2/bin/jajs_spmd_status
   # /opt/jp1ajs2/bin/ajsqlstop#
   # /opt/jp1ajs2/bin/ajsqlstatus#

   #:

   This command needs to be executed only if queueless jobs are used. On the logical host, detach the logical host from the queueless agent service by using an ajsqldetach command without stopping the Service.

6. Execute the following command to set the environment setting parameters described in (2) Environment setting parameter below:

   jajs_config -k definition-key "parameter-name"=value

7. Restart the services that you stopped in step 5.^#

   The new settings are applied.

   #:

   If you detached the logical host from the queueless agent service in step 5,

   execute the ajsqlattach command to attach the logical host.

To Page Top

(2) Environment setting parameter

Table 14‒1: Environment setting parameter for setting whether restricting access to JP1/AJS3 is to be enabled or disabled

Definition key	Environment setting parameter	Explanation
[{JP1_DEFAULT|logical-host}\JP1AJS2COMMON]#	"CONNECTIONRESTRICTION"=	Setting for whether restricting connection is to be enabled or disabled

#:

The specification of the {JP1_DEFAULT|logical-host} part depends on whether the host is a physical host or a logical host. For a physical host, specify JP1_DEFAULT. For a logical host, specify the logical host name.

For details about the definition of this environment setting parameter, see 2.9.2(5) CONNECTIONRESTRICTION in the Job Management Partner 1/Automatic Job Management System 3 Configuration Guide 2.

Note that messages related to restricting connections are not output to the log by default. To output these messages to the log, you need to set the following environment setting parameters.

Table 14‒2: Environment setting parameter for outputting messages related to restricting connections to JP1/AJS3 to the log

Definition key	Environment setting parameter	Explanation
[{JP1_DEFAULT|logical-host}\JP1AJSMANAGER]#	"CONRESTRICTLOG"=	Setting for whether connection restriction log data is to be output to the scheduler log
	"CONRESTRICTSYSLOG"=	Setting for whether connection restriction log data is to be output to the syslog

#:

The specification of the {JP1_DEFAULT|logical-host} part depends on whether the host is a physical host or a logical host. For a physical host, specify JP1_DEFAULT. For a logical host, specify the logical host name.

For details about the definition of these environment setting parameters, see the following:

• 2.2.2(20) CONRESTRICTLOG in the Job Management Partner 1/Automatic Job Management System 3 Configuration Guide 2

• 2.2.2(21) CONRESTRICTSYSLOG in the Job Management Partner 1/Automatic Job Management System 3 Configuration Guide 2

To Page Top

(3) The connection permission configuration file

The following describes directorys and files related to the connection permission configuration file.

To Page Top