AS/400 User's Guide

1 Tivoli for AS/400 EndpointsUser s GuideVersion oli for AS/400 Endpoints user s Guide (December 1999)Copyright NoticeCopyright 1998, 1999 by Tivoli Systems, an IBM Company, including this documentation and all software. All rightsreserved. May only be used pursuant to a Tivoli Systems Software License Agreement or Addendum for Tivoli Productsto IBM Customer or License Agreement. No part of this publication may be reproduced, transmitted, transcribed, storedin a retrieval system, or translated into any computer language, in any form or by any means, electronic, mechanical,magnetic, optical, chemical, manual, or otherwise, without prior written permission of Tivoli Systems.

2 The document isnot intended for production and is furnished as is without warranty of any warranties on this document arehereby disclaimed including the warranties of merchantability and fitness for a particular to Government Users Documentation related to restricted rights Use, duplication or disclosure is subject torestrictions set forth in GSA ADP Schedule Contract with IBM following product names are trademarks of Tivoli Systems or IBM Corporation: AIX, AS/400 , IBM, OS/2,OS/400,RS/6000, Tivoli Management Environment, Tivoli, Tivoli Framework, Tivoli Distributed Monitoring, Tivoli Inventory,Tivoli Software Distribution, Tivoli Software Installation Service, and Tivoli user Administration.

3 Microsoft,Windows, Windows NT, and the Windows logo are trademarks or registered trademarks of Microsoft , Windows, Windows NT, and the Windows logo are trademarks or registered trademarks of is a registered trademark in the United States and other countries licensed exclusively through X/Open , LANDesk, MMX, Pentium, and ProShare are trademarks or registered trademarks of Intel Corporation inthe United States and other company, product, and service names mentioned in this document may be trademarks or servicemarks of in this publication to Tivoli Systems or IBM products, programs, or services do not imply that they will beavailable in all countries in which Tivoli Systems or IBM operates.

4 Any reference to these products, programs, or servicesis not intended to imply that only Tivoli Systems or IBM products, programs, or services can be used. Subject to TivoliSystem s or IBM s valid intellectual property or other legally protectable right, any functionally equivalent product,program, or service can be used instead of the referenced product, program, or service. The evaluation and verification ofoperation in conjunction with other products, except those expressly designated by Tivoli Systems or IBM, are theresponsibility of the Systems or IBM may have patents or pending patent applications covering subject matter in this document.

5 Thefurnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, tothe IBM Director of Licensing, IBM Corporation, North Castle Drive, Armonk, New York 10504-1785, for AS/400 Endpoints user s viiChapter 1 Overview and InstallationInstalling AS/400 Endpoints .. 1-3 Installing with Tivoli Software Installation 1-3 Installing with the Script .. 1-4 Installing Internationalization Support .. 1-4 object Packaging Utility for AS/400 .. 1-5 Installing the Tivoli object Packaging Utility for 1-6 Uninstalling the Tivoli object Packaging 1-8 Chapter 2 Tivoli Management Framework for AS/400 EndpointsStarting and Stopping AS/400 Endpoints.

6 2-1 Starting AS/400 Endpoints .. 2-2 Stopping AS/400 Endpoints .. 2-6 Using the AS/400 Task Library for Common Tasks .. 2-6 Tivoli Commands for AS/400 Systems .. 2-8AS/400 Unique Features .. 2-8AS/400 user Profiles .. 2-8 Chapter 3 Tivoli user Administration for AS/400 EndpointsUsing user Administration for AS/400 .. 3-2AS/400 Attributes .. 3-2AS/400-Specific Functions .. 3-3 Populate/Discover .. 3-3 Distribute/Update .. 3-4 Passwords .. 3-4iiVersion Features for AS/400 .. 3-4AS/400-Specific Account Information .. 3-5 Modifying OS/400 user Accounts.

7 3-16 Chapter 4 Tivoli Security Management for AS/400 EndpointsTivoli Security Management Features .. 4-1OS/400 Native 4-2AS/400 System Values for Security .. 4-3AS/400 user Profiles .. 4-3AS/400 4-4AS/400 Group Profiles .. 4-4AS/400 object Authorities .. 4-4AS/400 object and Data Authorities .. 4-5AS/400 4-7 Authorization Roles and Notification Groups .. 4-7 Populating an AS/400 Security Profile .. 4-7 Populating All Records into a Security Profile .. 4-8 Populating Specific Records into a Security Profile .. 4-9OS/400 Group 4-9 Role Records.

8 4-9 Resource Records .. 4-10 System Policy Records .. 4-10 Procedures to Populate Records .. 4-10 Setting Profile Distribution Defaults .. 4-11 Distributing Security 4-12 Adding Security Records .. 4-13 Adding System Policy 4-13 Defining a System Policy 4-13 Setting Login Policy .. 4-14 Setting Password Policy .. 4-14 Tivoli for AS/400 Endpoints user s GuideiiiSetting Resource Type Access Policy .. 4-16 Assigning Members to a Group Record .. 4-16 Creating a Group Record .. 4-17 Specifying an Endpoint-specific Group 4-17 Setting Audit Control.

9 4-18 Setting Login Time 4-18 Creating Resource Records .. 4-19 Defining a Resource 4-19OS/400 Supported Resource Types .. 4-19 Setting Default Access Permissions .. 4-20 Setting Access Time 4-21 Setting Audit Control .. 4-21 Setting TCP Service Access 4-21 Creating Role Records .. 4-22 Setting Resource Access Rights .. 4-22 Setting OS/400 Security Audit Report Tasks .. 4-23 Setting OS/400 Endpoint Audit Log Report .. 4-23 Creating Audit Log Report 4-24 Executing Audit Report Endpoint 4-26 Specifying Security Database 4-27 Modifying OS/400 Endpoint Security.

10 4-27 Chapter 5 Tivoli Distributed Monitoring for AS/400 EndpointsOS/400 System Monitoring 5-3OS/400 Subsystem Monitoring Collection .. 5-4OS/400 Job Monitoring Collection .. 5-4OS/400 Pool Monitoring Collection .. 5-11OS/400 Disk Monitoring Collection .. 5-13OS/400 object Monitoring Collection .. 5-18OS/400 IOP Monitoring Collection .. 5-18ivVersion Async Monitoring Collection .. 5-23OS/400 Bisync Monitoring Collection .. 5-23OS/400 Ethernet Monitoring 5-24OS/400 Token Ring Monitoring Collection .. 5-24OS/400 IDLC Monitoring Collection.