Mainframe Connector ISPF/PDF Interface

This section describes the configuration requirements necessary to activate the Mainframe Connector ISPF/PDF interface. PICS (Mainframe Connector Parallel Information Communication Service) furnishes windows into the Mainframe Connector internal list tables and dataspace log contents. This interface is entirely optional and does not need to be activated for Mainframe Connector to perform its normal function. If your site desires an online, dynamic view into Mainframe Connector events you would choose to activate this interface. The interface works in conjunction with, and in parallel to, the standard logging used in Mainframe Connector

The Mainframe Connector ISPF/PDF interface provides the opportunity to view two different areas of information. The first option is to display the contents of any or all of the in-storage lists that can be used to influence Mainframe Connector operation. The second option is to display recent Mainframe Connector events. The information available with this option is very similar to that which is produced in the AUDIT and SYNCHLOG DD as well as that available in SMF record format. To use this display, the optional Mainframe Connector dataspace collector must be active (see the DATASPACE parameter described in Run-time parameters for details).

To display information, PICS utilizes the ISPF VIEW service which permits the use of the VIEW primary and line commands. This includes SORT, CREATE, REPLACE primary commands or eXlude, Show, Repeat, Delete line commands. SORTing can prove very beneficial if, for example, you want to create a log data display that sorts by log type or in time-stamp descending order.

The version of PICS distributed with Mainframe Connector 7.0.3 is functionally equivalent to the version of PICS distributed with PSYNCH/390 2.1.1 and 2.1.2 or Mainframe Connector 7.0.0, 7.0.1, and 7.0.2. The only fundamental differences are in the panel displays associated with the product rename. If you have installed PICS components from PSYNCH/390 2.1.1 or 2.1.2 or Mainframe Connector 7.0.0, 7.0.1, or 7.0.2, you can continue to use those components without updates from Mainframe Connector 7.0.3. If Mainframe Connector 7.0.2 is an upgrade from a release of PSYNCH/390 prior to PSYNCH/390 2.0.0 (i.e. - any PSYNCH/390 1.x.x version), the installed PICS components are not compatible with Mainframe Connector 7.0.3 and you will need to install version 7.0.3 PICS components to achieve compatibility with Mainframe Connector 7.0.3.

Activating the Mainframe Connector ISPF/PDF Interface

This section discusses the requirements for activating the ISPF/PDF interface for Mainframe Connector .

Mainframe Connector ISPF/PDF Load Modules

During the Mainframe Connector install process, the load modules for the Mainframe Connector ISPF/PDF interface were created in the target Mainframe Connector load library. The following load modules should be found in the target Mainframe Connector load library:

PICSMMC
PICSMSS
PICSMTBA

These load modules will need to be copied to a load library that will be available to the ISPF/PDF session for anyone that requires access to the Mainframe Connector ISPF/PDF interface. The PICSMTBA module is an authorized load module and must reside in an APF authorized dataset.

Mainframe Connector ISPF/PDF Panel and Message Members

The Mainframe Connector ISPF/PDF interface requires that panel and message members be made available to the ISPF/PDF environment. The following panel and message members reside in the .INSTLIB dataset that was created during the installation process:

PICSMLGH
PICSMLGP
PICSMTBH
PICSMTBP
PICSM10H
PICSM10P
PICSM20H
PICSM20P
PICM10

Copy the PICM10 member into a dataset in the ISPMLIB concatenation and copy the remaining members (PICSMLGH, PICSMLGP, PICSMTBH, PICSMTBP, PICSM10H, PICSM10P, PICSM20H, PICSM20P) into a dataset in the ISPPLIB concatenation of the logon procedure.

Updating the IKJTSOxx PARMLIB Member

Update the AUTHTSF section of the active IKJTSOxx PARMLIB member to include the PICSMTBA program name. This indicates to TSO that this program is eligible to execute as an authorized program when invoked from the IKJEFTSR service.

Authorizing PICS Usage

In a multiple (or even single) Mainframe Connector subsystem environment, it may be necessary or desirable to restrict the level of PICS access to appropriate Mainframe Connector subsystem information. PICS 7.0.3 implements resource rule checking, wherein subsystem information access validation is performed at each PICS access to a specified (or defaulted) Mainframe Connector subsystem. To assign the necessary authorizations, resource rules, whose format is dependent upon the security subsystem in use, must be defined as follows:

RACF

Issue the following TSO command for each subsystem to be authorized for PICS access:
```
RDEFINE FACILITY PSYNCH.PICS.ssnm
```
where ssnm is the 1 to 4 character subsystem name assigned to the Mainframe Connector subsystem via the SUBSYSNAME parameter described in Run-time parameters . This defines the specified facility class profile and assigns ALTER authority to the creating userid.
To permit additional users PICS access to a given Mainframe Connector subsystem, issue the following TSO command for each userid to which access is to be granted:
```
PERMIT PSYNCH.PICS.ssnm ACCESS(READ) CLASS(FACILITY) ID(userid)
```

ACF2

For ACF2, a resource rule of the following form must be created, compiled, and stored:
```
$KEY(PSYNCH) TYPE(FAC)
PICS.ssnm UID(uid) SERVICE(READ) ALLOW
```
where ssnm is the name of the Mainframe Connector subsystem with which you wish to communicate, and uid is the desired userid. If you wish to authorize access to multiple concurrently executing Mainframe Connector subsystems, then add further PICS.ssnm UID(uid) SERVICE(READ) ALLOW statements, replacing each ssnm with the associated subsystem name and uid with the appropriate userid.
In addition, a CLASMAP record containing a resource type of FACILITY with a type code of FAC must exist. This can be confirmed by entering the ACF2 environment in TSO (e.g. enter ACF in TSO menu 6) with a sufficient security privilege level (e.g. SECURITY) and entering:
```
SHOW CLASMAP
```
If a resource type of FACILITY with a type code of FAC is displayed, then the necessary environment should already be active. If not, consult the ACF2 Administrator Guide for information on defining and activating CLASMAP records.

TopSecret

define PSYNCH as an IBMFAC. This can be done with the following TSO command:
```
TSS ADD(anydept) IBMFAC(PSYNCH)
```
where anydept is a valid TopSecret DEPT.
to permit users PICS access to a given Mainframe Connector subsystem, issue the following TSO command for each userid to which access is to be granted:
```
TSS PERMIT(acid) IBMFAC(PSYNCH.PICS.ssnm)
```
where acid is the TopSecret ACID you are granting access to and ssnm is the 1 to 4 character subsystem name assigned to the PSYNCH/390 subsystem via the SUBSYSNAME parameter described in Run-time parameters .

The Mainframe Connector ISPF/PDF Primary Selection Panel

The PICS ISPF/PDF interface can accommodate multiple concurrent Mainframe Connector started tasks. PICS should be made available in one of the existing ISPF/PDF primary selection panels as follows:

PICS,'CMD(PICSMSS)'

Entering PICS on the primary command line of the ISPF/PDF primary selection panel where the PICS selection option has been included should result in:

The Mainframe Connector subsystem selection panel being displayed if multiple Mainframe Connector subsystems are detected.
The Mainframe Connector primary selection panel being displayed if only a single Mainframe Connector subsystem is detected.

Mainframe Connector Multiple Subsystem Primary Selection Panel

  -------------------------------------------------------------------------------
 --------  MM  MMM   //   FFFFFFF   RRRRR       AAAAAA     MM  MMM    EEEEEEE  -
 -------  MMMMMMM   //   FF        RR   RR     AA   AA    MMMMMMM    EE       --
 ------  MM M MM   //   FF        RR   RR     AA   AA    MM M MM    EE       ---
 -----  MM   MM   //   FFFFF     RRRRRR      AAAAAAA    MM   MM    EEEEE    ----
 ----  MM   MM   //   FF        RRRR        AA   AA    MM   MM    EE       -----
 ---  MM   MM   //   FF        RR  RR      AA   AA    MM   MM    EE       ------
 --  MM   MM   //   FF        RR    RR    AA   AA    MM   MM    EEEEEEE  -------
 -------------------------------------------------------------------------------
 -------------------------  CCCCC       OOOOOO     NN   NN  --------------------
 ------------------------  CC   CC     OO   OO    NNN  NN  ---------------------
 ----- P arallel -------  CC          OO   OO    NNNN NN  - P arallel ----------
 ---- I nformation ----  CC          OO   OO    NN NNNN  - I nformation --------
 --- C ommunication --  CC          OO   OO    NN  NNN  - C ommunication -------
 -- S ervice 7.0.3 --  CC   CC     OO   OO    NN   NN  - S ervice 7.0.3 --------
 ------------------     CCCCC      OOOOOO    NN   NN  --------------------------
 ------------------------------------------------------------------------------- 
 Command ===>
 Select subsystem(s):   PSS1    PSS2

Figure: Mainframe Connector Primary Selection Panel

 -------------------------------------------------------------- Subsystem: PSS2
 --------  MM  MMM   //   FFFFFFF   RRRRR       AAAAAA     MM  MMM    EEEEEEE  -
 -------  MMMMMMM   //   FF        RR   RR     AA   AA    MMMMMMM    EE       --
 ------  MM M MM   //   FF        RR   RR     AA   AA    MM M MM    EE       ---
 -----  MM   MM   //   FFFFF     RRRRRR      AAAAAAA    MM   MM    EEEEE    ----
 ----  MM   MM   //   FF        RRRR        AA   AA    MM   MM    EE       -----
 ---  MM   MM   //   FF        RR  RR      AA   AA    MM   MM    EE       ------
 --  MM   MM   //   FF        RR    RR    AA   AA    MM   MM    EEEEEEE  -------
 -------------------------------------------------------------------------------
 -------------------------  CCCCC       OOOOOO     NN   NN  --------------------
 ------------------------  CC   CC     OO   OO    NNN  NN  ---------------------
 ----- P arallel -------  CC          OO   OO    NNNN NN  - P arallel ----------
 ---- I nformation ----  CC          OO   OO    NN NNNN  - I nformation --------
 --- C ommunication --  CC          OO   OO    NN  NNN  - C ommunication -------
 -- S ervice 7.0.3 --  CC   CC     OO   OO    NN   NN  - S ervice 7.0.3 --------
 ------------------     CCCCC      OOOOOO    NN   NN  --------------------------
 ------------------------------------------------------------------------------- 
  Command or selection ===> 
 1. Internal tables   2. Dataspace logs

The Mainframe Connector ISPF/PDF List Selection Panel

If you select Option 1 from the Mainframe Connector primary selection panel , a list selection panel will be displayed. This panel can be used to select which Mainframe Connector internal lists are to be displayed. Each of the INLIST, EXLIST, or ADMINIDS list can be selected individually or in any combination. The resulting display will show the current internal list contents for each list.

Note that list activation status, i.e. - ACTIVATED or DEACTIVATED, is not shown in the display; it can be ascertained via the F mfc,D=PARMS operator command.

See:

Mainframe Connector List Selection Panel for a sample display of the list selection panel.
Mainframe Connector Internal List Data for a representative example of the type of information that is available from the internal list display.

Mainframe Connector List Selection Panel

  ---------------------------  Mainframe Connector  -----------------------------
 -------------------------------------------------------------------------------
 --------------------------------  P  I  C  S  ---------------------------------
 -------------------------------------------------------------------------------
 ----------------  Parallel Information Communication Service  -----------------
 ----------------------------------  7.0.3  ------------------------------------
 -------------------------------------------------------------------------------
 ------------------------------  Internal Tables  ------------------------------
 ------------------------------------------------------------------------------- 
  Command ===> 
 Select list type(s) (enter any nonblank character beside desired selection(s)): 
 ===>   INCLUDEUSER list    ===>   INCLUDEGROUP list 
 ===>   EXCLUDEUSER list    ===>   EXCLUDEGROUP list 
 ===>   ADMINIDS list

Mainframe Connector Internal List Data

 VIEW       Mainframe_Connector_Internal_Tables             Columns 00001 00022
 Command ===>                                                  Scroll ===> HALF
 ****** ***************************** Top of Data ******************************
 000001 INCLUDEUSER : No data
 000002 INCLUDEGROUP: No data
 000003 EXCLUDEUSER : TEST1
 000004 EXCLUDEUSER : MVS001
 000005 EXCLUDEUSER : IBMUSER
 000006 EXCLUDEUSER : MVSJDL-
 000007 EXCLUDEUSER : MVSSKG-
 000008 EXCLUDEUSER : DBAJGR-
 000009 EXCLUDEGROUP: MYGROUP
 000010 ADMINID     : ADMMVS-
 000011 ADMINID     : ADM77
 ****** **************************** Bottom of Data ****************************

The Mainframe Connector ISPF/PDF Activity Log Panel

If you select Option 2 from the Mainframe Connector primary selection panel , an activity log data selection panel will be displayed. This panel can be used to select which Mainframe Connector log information is to be displayed. Three types of log information can be requested – log information that has been written to the AUDIT DD , log information that has been written to the SYNCHLOG DD , and Mainframe Connector SMF record images. The collection of log information can be influenced after Mainframe Connector has been started. See Modifying the DATASPACE logging options for the operator commands that can be used to activate and deactivate log data collection.

See:

Mainframe Connector Log Selection Panel for a sample display of the log data selection panel.
Mainframe Connector Log Data provides a representative example of the type of information that is available from the log data display. Remember, right scrolling will be necessary to examine all data available in this display.

Mainframe Connector Log Selection Panel

 ---------------------------  Mainframe Connector  -----------------------------
 -------------------------------------------------------------------------------
 --------------------------------  P  I  C  S  ---------------------------------
 -------------------------------------------------------------------------------
 ----------------  Parallel Information Communication Service  -----------------
 ----------------------------------  7.0.3  ------------------------------------
 -------------------------------------------------------------------------------
 ------------------------------  Dataspace Logs  -------------------------------
 -------------------------------------------------------------------------------

  Command ===>
   

 Select log type(s) (enter any nonblank character beside desired selection(s)): 
 ===>   SMF    ===>   AUDIT    ===>   SYNCHLOG

Mainframe Connector Log Data

 VIEW       Mainframe_Connector_Dataspace_Logs              Columns 00001 00072
 Command ===>                                                  Scroll ===> HALF
 ****** ***************************** Top of Data ******************************
 000001 Rectype = Synchlog   Date-time = 2002.317-11:42:41.74   Msg = Attempting
 000002 Rectype = Synchlog   Date-time = 2002.317-11:42:41.87   Msg = Password f
 000003 Rectype = SMF        Date-time = 2002.317-11:42:41:87   UID = MTECH1
 000004 Rectype = Audit      is not present in the dataspace
 ****** **************************** Bottom of Data ****************************

Removing a previous PICS version

After successfully installing and activating PICS 7.0.3, you may wish to reclaim resources by removing the components associated with a previous PICS version, if one had been installed.

Note

This only applies if the prior PICS version was from a PSYNCH/390 1.x.x release.

To accomplish this, delete the following:

ISPF panel members PICSLOGH, PICSLOGP, PICSTBLH, PICSTBLP, PICS001H, and PICS001P
ISPF message member PICS00
Load modules PICSLOG, PICSMAC, PICSTBL, and PICSTBLA
The PICSTBLA program name entry in the AUTHTSF section of the active IKJTSOxx PARMLIB member

In this section: