WIXLIB

Tivoli for AS/400 EndpointsUser’s GuideVersion 3.6April 1999

Tivoli for AS/400 Endpoints User’s Guide (April 1999)Copyright NoticeCopyright 1998, 1999 by Tivoli Systems, an IBM Company, including this documentation and allsoftware. All rights reserved. May only be used pursuant to a Tivoli Systems Software License Agreementor Addendum for Tivoli Products to IBM Customer or License Agreement. No part of this publication maybe reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any computerlanguage, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual, orotherwise, without prior written permission of Tivoli Systems. The document is not intended for productionand is furnished “as is” without warranty of any kind. All warranties on this document are herebydisclaimed including the warranties of merchantability and fitness for a particular purpose.Note to U.S. Government Users—Documentation related to restricted rights—Use, duplication ordisclosure is subject to restrictions set forth in GSA ADP Schedule Contract with IBM Corporation.TrademarksThe following product names are trademarks of Tivoli Systems or IBM Corporation: AIX, AS/400, IBM,OS/2,OS/400, RS/6000, Tivoli Management Environment, Tivoli, Tivoli Framework, Tivoli DistributedMonitoring, Tivoli Inventory, Tivoli Software Distribution, Tivoli Software Installation Service, and TivoliUser Administration. Microsoft, Windows, Windows NT, and the Windows logo are trademarks orregistered trademarks of Microsoft Corporation.Microsoft, Windows, Windows NT, and the Windows logo are trademarks or registered trademarks ofMicrosoft Corporation.UNIX is a registered trademark in the United States and other countries licensed exclusively throughX/Open Company Limited.ActionMedia, LANDesk, MMX, Pentium, and ProShare are trademarks or registered trademarks of IntelCorporation in the United States and other countries.Other company, product, and service names mentioned in this document may be trademarks orservicemarks of others.NoticesReferences in this publication to Tivoli Systems or IBM products, programs, or services do not imply thatthey will be available in all countries in which Tivoli Systems or IBM operates. Any reference to theseproducts, programs, or services is not intended to imply that only Tivoli Systems or IBM products,programs, or services can be used. Subject to Tivoli System’s or IBM’s valid intellectual property or otherlegally protectable right, any functionally equivalent product, program, or service can be used instead of thereferenced product, program, or service. The evaluation and verification of operation in conjunction withother products, except those expressly designated by Tivoli Systems or IBM, are the responsibility of theuser.Tivoli Systems or IBM may have patents or pending patent applications covering subject matter in thisdocument. The furnishing of this document does not give you any license to these patents. You can sendlicense inquiries, in writing, to the IBM Director of Licensing, IBM Corporation, North Castle Drive,Armonk, New York 10504-1785, U.S.A.

ContentsPreface. viiChapter 1—Overview and InstallationInstalling AS/400 Endpoints . 1-3Installing with TME 10 Software Installation Service. 1-3Installing with the w4inslcf.pl Script . 1-4Installing Internationalization Support. 1-4Object Packaging Utility for AS/400 . 1-5Installing the Tivoli Object Packaging Utility for AS/400. 1-6Uninstalling the TME 10 Object Packaging Utility . 1-8Chapter 2—Tivoli Framework for AS/400 EndpointsStarting and Stopping AS/400 Endpoints . 2-1Starting AS/400 Endpoints. 2-2Stopping AS/400 Endpoints . 2-6Using the AS/400 Task Library for Common Tasks . 2-6Tivoli Commands for AS/400 Systems . 2-8AS/400 Unique Features . 2-8AS/400 User Profiles . 2-8Chapter 3—Tivoli User Administration for AS/400EndpointsUsing User Administration for AS/400 . 3-2AS/400 Attributes . 3-2AS/400-Specific Functions . 3-3Populate/Discover . 3-3Distribute/Update . 3-4Passwords . 3-4Unique Features for AS/400 . 3-4AS/400-Specific Account Information . 3-5Modifying OS/400 User Accounts. 3-16TME 10 for AS/400 Endpoints User’s Guidei

Chapter 4—Tivoli Security Management for AS/400EndpointsTivoli Security Management Features. 4-1OS/400 Native Security. 4-2AS/400 System Values for Security . 4-3AS/400 User Profiles. 4-3AS/400 Permissions. 4-4AS/400 Group Profiles . 4-4AS/400 Object Authorities . 4-4AS/400 Object and Data Authorities . 4-5AS/400 Auditing. 4-7Authorization Roles and Notification Groups . 4-7Populating an AS/400 Security Profile. 4-7Populating All Records into a Security Profile . 4-8Populating Specific Records into a Security Profile . 4-9OS/400 Group Records. 4-9Role Records . 4-9Resource Records . 4-10System Policy Records . 4-10Procedures to Populate Records . 4-10Setting Profile Distribution Defaults . 4-11Distributing Security Profiles. 4-12Adding Security Records . 4-13Adding System Policy Records. 4-13Defining a System Policy Record. 4-13Setting Login Policy . 4-14Setting Password Policy . 4-14Setting Resource Type Access Policy. 4-16Assigning Members to a Group Record. 4-16Creating a Group Record . 4-17Specifying an Endpoint-specific Group Name . 4-17iiVersion 3.6

Setting Audit Control . 4-18Setting Login Time Restrictions. 4-18Creating Resource Records. 4-19Defining a Resource Record. 4-19OS/400 Supported Resource Types . 4-19Setting Default Access Permissions . 4-21Setting Access Time Restrictions. 4-21Setting Audit Control . 4-21Setting TCP Service Access Permissions. 4-22Creating Role Records . 4-22Setting Resource Access Rights . 4-23Setting OS/400 Security Audit Report Tasks . 4-23Setting OS/400 Endpoint Audit Log Report . 4-23Creating Audit Log Report Filters. 4-24Executing Audit Report Endpoint Tasks. 4-27Specifying Security Database Report. 4-27Modifying OS/400 Endpoint Security . 4-27Chapter 5—Tivoli Distributed Monitoring for AS/400EndpointsOS/400 System Monitoring Collection. 5-3OS/400 Subsystem Monitoring Collection . 5-4OS/400 Job Monitoring Collection . 5-4OS/400 Pool Monitoring Collection . 5-11OS/400 Disk Monitoring Collection . 5-13OS/400 Object Monitoring Collection. 5-18OS/400 IOP Monitoring Collection . 5-18OS/400 Async Monitoring Collection . 5-23OS/400 Bisync Monitoring Collection . 5-23OS/400 Ethernet Monitoring Collection . 5-24OS/400 Token Ring Monitoring Collection . 5-24TME 10 for AS/400 Endpoints User’s Guideiii

OS/400 IDLC Monitoring Collection . 5-26OS/400 ISDN Monitoring Collection . 5-26OS/400 SDLC Monitoring Collection . 5-27OS/400 X25 Monitoring Collection . 5-28Application Response Management for AS/400 . 5-28Chapter 6—Tivoli Inventory for AS/400 EndpointsScanning for AS/400 Inventory . 6-2Scanning Hardware Inventory. 6-2Scanning Software Inventory. 6-3Extending the Configuration Repository Schema for AS/400 PTFs . 6-3Scanning for AS/400 PTFs . 6-4Viewing and Querying OS/400 Information . 6-7OS/400 Software Information . 6-7OS/400 PTF Information. 6-7Inventory Features Not Supported by AS/400. 6-8Chapter 7—Tivoli Software Distribution for AS/400EndpointsConfiguration Programs. 7-1Before Program . 7-2After Program. 7-4Removal Program. 7-5After Removal Program . 7-5Commit Program. 7-5On Error Program. 7-6Input Files.

Framework User’s Guide, Tivoli Framework Reference Manual, and Tivoli Framework Release Notes Provide detailed conceptual and procedural information about planning, configuring, maintaining, and managing Tivoli installations from the Tivoli desktop of the command line. Information about how to apply patches is also included in this manual. Tivoli User and Group Management Guide and Tivoli .