|
How do I setup to use TCP/IP for my BRMS network?
With V5R1 or later, you can now use native TCP/IP for the BRMS Networking Feature.
Perform the following steps to enable a BRMS networked system for TCP/IP operations.
Step 1: Check TCP/IP
Use the following command to verify TCP/IP is running on each of the systems in the BRMS network:
PING RMTSYS(remote-system-name)
If TCP/IP is not running, then you will need to configure and/or start TCP/IP.
Step 2: SET TCP/IP DDM Connection Security
You need to determine whether you intend to use secured or non-secured DDM connections to the remote systems in the BRMS network. In order to use a non-secured DDM connection, the user id must exist on the remote system, although the user's password will not be validated. To use a secured DDM connection the user id and password must be the same on both the local and remote systems. You may want to review this setup with your site security administrator before taking specific actions.
For Non-secured DDM connections:
Use the following command to change the TCP/IP DDM attributes for non-secured operations:
CHGDDMTCPA PWDRQD(*NO)
If you are going from a secured DDM connection to a non-secured DDM connection make sure to remove the server authentication entries. Use the following command to remove server Authentication entries for each user
RMVSVRAUTE USRPRF(user-profile)
SERVER(QDDMSERVER)
NOTE: "QDDMSERVER" must be uppercase!
Go to step 3:
For Secured DDM connection:
Use the following command to change the TCP/IP DDM attributes for secured operations:
CHGDDMTCPA PWDRQD(*YES)
Automated secure TCP/IP DDM operations are not possible if authentication passwords cannot be stored. Use the following command to change the QRETSVRSEC system value so that passwords used for authentication can be stored on the system:
CHGSYSVAL QRETSVRSEC VALUE('1')
Use the following command to add server authentication entries for each user who will be authorized to perform secured TCP/IP operations to the remote systems:
ADDSVRAUTE USRPRF(user-profile)
SERVER(QDDMSERVER)
USRID(remote-system-userid)
PASSWORD(remote-system-password)
NOTE: "QDDMSERVER" must be uppercase!
Use the following command to add a server authentication entry for the QBRMS user profile. (This user profile is used for network syncronization. )
ADDSVRAUTE USRPRF(QBRMS)
SERVER(QDDMSERVER)
USRID(remote-system-userid)
PASSWORD(remote-system-password)
NOTE: "QDDMSERVER" must be uppercase!
If the remote-system-userid does not have *ALLOBJ special authority then the user should have QBRMS as a group profile and special authority must be *NONE. Use the following command on the remote system to change user's profile.
CHGUSRPRF USRPRF(remote-system-userid) GRPPRF(QBRMS)
In addition, the remote system user should have *USE authority to the CRTDDMF command on the current system.
A server authorization entry can be removed using the RMVSVRAUTE command or changed using the CHGSVRAUTE command. See the CL Reference manual for a complete description of these commands and command parameters.
Note: There can only be one server authorization entry for a user no matter what remote system is specified. This means that for a user to access multiple systems in the network, that user's id and password must be the same on all BRMS networked systems.
Step 3: Configure the TCP/IP DDM Server Automatic Restart
Use the following command to change the TCP/IP DDM server attributes if you want the server automatically started when TCP/IP is started:
CHGDDMTCPA AUTOSTART(*YES)
Step 4: Starting and Ending the DDM Server
Use the following command to end the TCP/IP DDM server if you changed any of the attributes:
ENDTCPSVR SERVER(*DDM)
Use the following command to start the TCP/IP DDM server:
STRTCPSVR SERVER(*DDM)
Step 5: Enable BRMS to use TCP/IP
On a V5R1 system use the following command to create a specific data area object that BRMS uses to determine whether or not to perform TCP/IP operations:
CRTDTAARA DTAARA(QUSRBRM/Q1ATCPIP) TYPE(*CHAR) LEN(1) TEXT('TCP/IP Enabled system')
On a V5R2 and above system use the following command to enable TCP/IP.
WRKPCYBRM TYPE(*SYS)
Select option 4 to Change network group
Enter *YES in Enable for TCP/IP and press Enter.
Note: Customers upgrading from V5R1 also need to make this change even if they were using TCP/IP in V5R1.
Step 6: Setup BRMS network.
Refer to the BRMS User Guide, Chapter 13, Networking with BRMS for instructions on how to set up a BRMS network.
|