21.2.1 Setting the procedure for restricting connections to JP1/AJS3

(1) Setting the procedure

1. Copy the model file of the connection permission configuration file to the environment settings file storage folder.

   For details about the model file and the environment settings file storage folder, see (3) The connection permission configuration file.

2. Change the name of the copied file to the specified name.

   For details about the file names, see (3) The connection permission configuration file.

3. Use a text editor to edit the file.

   In Windows, use a text editor such as Notepad for editing. In UNIX, use a text editor such as vi for editing.

   Set the IP address of the hosts that you want to permit to connect in the connection permission configuration file.

   For details about how to set the connection permission configuration file, see 21.2.2 How to set the connection permission configuration file.

4. Change the access permission of the connection permission configuration file.

   The access permission of the model file is inherited as the permission of the storage folder. You need to change the access permission of the file so that general users will not be able to access or edit the file.

5. Stop the following service:

   In Windows:

   In Windows Control Panel, open the Services administrative tool, and stop the following service:

   - JP1/AJS3 service

   - JP1/AJS3 Queueless Agent service^#

   In UNIX:

   Execute the following commands to stop the JP1/AJS3 service, and then make sure that all processes are stopped:

   # /opt/jp1ajs2/bin/jajs_spmd_stop

   # /opt/jp1ajs2/bin/jajs_spmd_status

   # /opt/jp1ajs2/bin/ajsqlstop^#

   # /opt/jp1ajs2/bin/ajsqlstatus^#

   #:

   This operation needs to be executed only if queueless jobs are used.

   On the logical host, detach the logical host from the queueless agent service by using an ajsqldetach command or another method, without stopping the Service.

6. Execute the following command to set the environment setting parameters described in (2) below:

   jajs_config -k definition-key "parameter-name"=value

7. Restart the services that you stopped in step 5.

   The new settings are applied.

   If you detached the logical host from the queueless agent service in step 5, execute the ajsqlattach command to attach the logical host.

To Page Top

(2) Environment setting parameter

Table 21‒7: Environment setting parameter for setting whether restricting access to JP1/AJS3 is to be enabled or disabled

Definition key	Environment setting parameter	Explanation
[{JP1_DEFAULT|logical-host}\JP1AJS2COMMON]#	"CONNECTIONRESTRICTION"=	Setting for whether restricting connection is to be enabled or disabled

#:

The specification of the {JP1_DEFAULT|logical-host} part depends on whether the host is a physical host or a logical host. For a physical host, specify JP1_DEFAULT. For a logical host, specify the logical host name.

For details about the definition of this environment setting parameter, see 20.11.2(5) CONNECTIONRESTRICTION.

Note that messages related to restricting connections are not output to the log by default. To output these messages to the log, you need to set the following environment setting parameters.

Table 21‒8: Environment setting parameter for outputting messages related to restricting connections to JP1/AJS3 to the log

Definition key	Environment setting parameter	Explanation
[{JP1_DEFAULT|logical-host}\JP1AJSMANAGER]#	"CONRESTRICTLOG"=	Setting for whether connection restriction log data is to be output to the scheduler log
	"CONRESTRICTSYSLOG"=	In Windows: Setting for whether connection restriction log data is to be output to the Windows event log In UNIX: Setting for whether connection restriction log data is to be output to the syslog

#:

The specification of the {JP1_DEFAULT|logical-host} part depends on whether the host is a physical host or a logical host. For a physical host, specify JP1_DEFAULT. For a logical host, specify the logical host name.

For details about the definition of these environment setting parameters, see the following:

• 20.4.2(23) CONRESTRICTLOG

• 20.4.2(24) CONRESTRICTSYSLOG

To Page Top

(3) The connection permission configuration file

The following describes folders and files related to the connection permission configuration file.

To Page Top