ITOMweb dependencies with other subsystems

The Output Manager web services use Db2® and TCP/IP. Your site security policies might require you to add the web server user ID to the access list on existing RACF® profiles or create new profiles.

Your webserver requires UPDATE access to the BPX.SERVER FACILITY class profile. For example:
PERMIT BPX.SERVER CLASS(FACILITY) ID(WEBSRVR) ACCESS(UPDATE)
SETROPTS RACLIST(FACILITY) REFRESH
Note: Replace WEBSRVR with the user ID your web server runs as.
Your webserver requires the UPDATE access to the BPX.DAEMON FACILITY class profile. For example:
PERMIT BPX.DAEMON CLASS(FACILITY) ID(WEBSRVR) ACCESS(UPDATE)
SETROPTS RACLIST(FACILITY) REFRESH
Note: Replace WEBSRVR with the user ID your web server runs as.
The web server's connections to Db2 require READ access to the RRSAF profile in the DSNR class. Check with your Db2 security administrator to see which profiles have been created. The site might have a generic profile for multiple subsystem names, or discrete profiles for each subsystem. In the following example, WEBSRVR is granted permission to use RRSAF in the DB1A subsystem:
PERMIT DB1A.RRSAF CLASS(DSNR) ID(WEBSRVR) ACCESS(READ)
SETROPTS RACLIST(FACILITY) REFRESH
The web server requires program control for the Db2 code. You can set this using RDEFINE, if no profiles exist, or RALTER, if you already have some generic profiles created. Check with your RACF administrator to see which PROGRAM control profiles exist. The V9 server requires program control on the following libraries:
  • hlq.LINKLIB
  • hlq.SCEERUN
  • hlq.SCEERUN2
  • hlq.SCLBDLL
If the Db2 code libraries are not included, you can add them with RALTER where ?SDSNEXIT? and ?SDSNLOAD? are the Db2 SDSNEXIT and SDSNLOAD libraries for the Db2 subsystem for your Output Manager database. For example:
RALTER PROGRAM * ADDMEM('?SDSNEXIT?') UACC(READ)
RALTER PROGRAM * ADDMEM('?SDSNLOAD?') UACC(READ)
SETROPTS WHEN(PROGRAM) REFRESH