BrightStor CA-1 Tape Management - SupportConnect

More documents

Recommendations

Info

For example, if volume 123456 is defined in the TMC in a scratch state, and is being changed from SLto NL on device 1AE4, a security check will be done (read level access)against a resource called'S2NRES.V123456.UCB1AE4'. Generic rules can be set to support S2NRES.V*, S2NNORES.V*,A2NRES.V*,A2NNORES.V*, etc. Once these 12 generic rules are defined, you may also define rulesfor specific volumes or masks to indicate ranges of volumes for special treatment. Also, setting up arule such as'S2NRES.V*.UCB1E0*' would control SL to NL label changes for all volumes on devices1E00-1E0F. In order for the EXT option of LCHG to work, there is a requirement that FUNC must beset to either YES or EXT. If FUNC is set to NO, then even if LCHG is set to EXT no external securitycall will be made.• The YSVC optionThe new YSVC value of E or EXT means that even if the caller of the YSVC service has UPDATE levelaccess (unconditional update) to the YSVCUNCD resource if the data set name is being changed,security will be checked as if the caller had YSVCCOND access (conditional update access).Thismeans that someone with UPDATE level access to the YSVCUNCD resource cannot change the dataset name unless they also have access to both the original and new data set names. They can changeany other field without any additional security checks, but not the data set name. This is therecommended value for the YSVC option, since there is no reason during normal tape librarianfunctions to change the data set name on a CA-1-controlled volume. However, the default for YSVChas been left as NO for those sites that have never activated external security control over CA-1.• The FUNC optionThe new FUNC value of E or EXT means that instead of simply checking to see if access is permittedto a resource, such as BLPNORES or NLRES, the resource that will be checked is in a new "extended"format. The new resource name starts with the same 5-8 characters that were previously checked,however there are two more qualifiers included. The format is 'xxxRES.Vvvvvvv.UCBnnnn' or'xxxNORES.Vvvvvvv.UCBnnnn'. The xxx is either BLP, NL, NSL, or FOR (for foreign tape processing).The RES or NORES indicates if the volume is resident to CA-1 (defined in the TMC) or not. The vvvvvvis the volser of the volume being accessed, and nnnn is the UCB address the access is beingattempted upon. If you want to prevent anyone from using EXPDT=98000 to bypass CA-1 for tapesinside a robotic device whose UCB addresses are 01E0-01EF, you would code a rule in your externalsecurity system for the following resource: 'FOR*.V*.UCB01E*'. This will control both FORRES andFORNORES processing (using EXPDT=98000 for both in-house tapes and foreign tapes), for allvolumes, where the UCB address is between 01E0 and 01EF.• The ABE optionThe ABE option still accepts a value of 0-999, meaning the ddd portion of LDATE/ddd will be assignedto any tape files closed by abend processing. You can now also use a value of CATALOG orDAYS000-DAYS999. CATALOG indicates that the default abend expiration date is CATALOG. A valueof DAYSnnn indicates that the abend expiration date is simply the specified number of days sincecreation.NEW OPTIONSThe five new options are CATSEC, NLWTOR, MIXGDG, UX0AUPD, and PMASK.- The CATSEC optionCATSEC indicates that CA-1 should perform an external security call whenever a tape file is beingPDC# QI48357
CATALOGed or UNCATALOGed from the OS Catalog. This security check is similar to the one doneby your external security system, but will be done even if the external security system is not active fortape data sets. If you want to rely strictly on CA-1 to "drive" the external security calls, use CATSEC tocause CA-1 to issue security calls similar to those of an external security system. The difference (muchlike the difference with the CA-1OCEOV option and standard external security checks) is in theprocessing of foreign volumes and non-existent tape files. If CATSEC is set to Y or YES (default is Nor NO), then an external security call will be done whenever a tape file is being cataloged. Likewise, asecurity call will be made when a tape file is being uncataloged. However, if the CATSEC option is setto B or BYP, then the security call will be bypassed if the volume it is currently cataloged to is notdefined in the TMC or ifthe volume is in scratch status. This way, a value of B or BYP will allow oldcatalog entries to be removed without having to give the person special access to the user catalogs ordefine rules for data sets that no longer exist.- The NLWTOR optionThe NLWTOR option NLWTOR is a replacement for the optional usermod T5XD917. If NLWTOR is setto N or NO (default is Y or YES), it prevents the IECTMS1 WTOR from being issued when a tape iscalled for by specific volser and no labels are present. It is "assumed" that the requested volume will bemounted correctly. Many sites with robotic systems that still use NL or BLP use this optional usermodto prevent this WTOR. If a request is made to read an NL volume 123456(VOL=SER=123456,LABEL=NL), then in a robotic environment it may be assumed that the requestedvolume will always be correctly mounted. A value of Y or YES will indicate that the IECTMS1 WTORwill still be issued as it was previously.- The MIXGDG optionThe MIXGDG option MIXGDG is a replacement for optional usermod TF45060.If MIXGDG is set to Yor YES (default is N or NO), then the catalog indicator will correctly be turned off when a (+1)generation is created on DASD that results in a tape generation being "bumped off". Previously,without this option and without TF45060, if a (+1) was created on DASD and the oldest generation"bumped off" resided on tape, the catalog indicator was not turned off in the TMC.- The UX0AUPD optionThe UX0AUPD option UX0AUPD is a replacement for the optional usermodT5Q4137. With this optionset to Y or YES (default is N or NO), then a new call is made to exit-A (TMSUX2A).This new call ismade just prior to the update of the TMC (while the TMC is enqueued) and allows for changes to theTMC record itself. This has been used by some customers that want to change the expiration datefrom what was specified in the JCL without using retention rules in TMSEXPDT. It has also been usedto store the CPU ID on which the file was created, in the user field (instead of doing the same thingwith an SMF exit). If this option is changed to Y or YES, make sure the version of exit-A (TMSUX2A),already active on the system, can support this new call. The AXOPCODE in the parameter list for thisnew call is x'14'.- The PMASK optionThe new PMASK option allows the six pattern masking characters to be changed. Note: Use of thebackslash character cannot be changed. Instead of using #@!?*- as the six pattern maskingcharacters, you can specify any non-alpha or non-numeric characters you want. The only additionalrestriction is that no character can be used more than once (and of course the back-slash charactercannot be used either). If this option is used, and the characters are changed (which is NOTRECOMMENDED), then you must make sure that all rules in the TMONSMxx member, as well as allRetention and Vaulting rules, are also changed at the same time. If the PMASK option is used, and thepattern masking characters are changed without changing the rules, then the results of TMSEXPDT orthe Vaulting System may not be what is expected.PDC# QI48357
Page 1 and 2: BrightStor® CA-1® Tape Management
Page 5 and 6: COMPUTER ASSOCIATES INTERNATIONAL,
Page 7: • Data Erase UtilityA new Data Er
Page 10 and 11: Drop Support Date for Release 5.2:C
Page 12 and 13: This utility accepts input either v
Page 14 and 15: After all volumes have been written
Page 16 and 17: In this example, logical volumes LV
Page 18 and 19: QUERY COMPLETE, VOLUME IN ROBOT - A
Page 21 and 22: BrightStor CA-1 Product Documentati
Page 23 and 24: Note that a meaningful compression
Page 25 and 26: Replace line-----------------------
Page 27: with the following:----------------
Page 30 and 31: 1.28.3.1 Job Control Statements//st
Page 32 and 33: *** TESTRDS NOT VALID WITH DSNBS, T
Page 34 and 35: show a volser if either the TMACVOL
Page 36 and 37: User response: If this is an AIVS v
Page 38 and 39: CA-1 Retention data set Rules (Opti
Page 40 and 41: Specification:If set to YES, the Cn
Page 42 and 43: Or no valid input command was found
Page 44 and 45: Thank you for your continued suppor
Page 48 and 49: CONCLUSION:In addition to these opt
Page 50 and 51: • TMSBLDVRThis section documents
Page 52 and 53: 4. TMSBINQ, the online TMSTIQ displ
Page 54 and 55: FOLLOW UP PROCEDURES AFTER INITIAL
Page 56 and 57: Appendix A., TMC Volume Definition
Page 58 and 59: User Response: None. Information on
Page 60 and 61: TMSXT05I ATTACH TMSBLDVR TO COPY/EX
Page 62 and 63: User Response: None. Information on
Page 64 and 65: TMSXT80E COULD NOT OBTAIN TMSVOLU T
Page 66 and 67: 52 82 EXTEND ALREADY ACTIVESee msg
Page 68 and 69: TMS REPORT-80 Report Field Definiti
Page 70 and 71: TMS REPORT-81 Report Field Definiti
Page 72 and 73: Eyy-112 I/O ERROR ON TMCExplanation
Page 74: (29 CPU entries in same format not

BrightStor CA-1 Tape Management - SupportConnect

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?