Installing
Installing the adapter mainly involves importing the adapter profile and creating an adapter service. Depending on the adapter, several other tasks can be involved to completely install it.
The installation worksheet lists the information that is required to install and configure the adapter. Complete this worksheet before you start the installation procedure for ease of reference. Make a copy of the worksheet for each adapter instance you install.
| MVS data set name | The MVS data set high-level qualifier for upload and installation. |
| Adapter instance name | The default is racfagent. There is no maximum length, but the length must be manageable. This value is specified in the config.sh UNIX System Services shell script. |
| USS Adapter read-only home | The USS file system location that is used to store the adapter binaries. The
default is /usr/lpp/verracf. The read-only home and the
read/write home must specify different locations. If they are the same then the installation might
fail. It is advised to allocate at least 120Mb of free space to the read/only
home. |
| USS Adapter read/write home | The USS file system location that is used to store the adapter log file, register, intermediate reconciliation results and start scripts. The default is /var/ibm/isimracf. The read-only home and the read/write home must specify different locations. If they are the same, then the installation might fail. The read/write home size must be large enough that it can be temporary used to store intermediate reconciliation results. For example, 1 Mb / 100 accounts or groups. The size must be more than the regular requirements for activity logging, depending on the adapter-specific configuration and storing all adapter scripts and registry files. |
| Adapter port number | The default is 45580. This value can be modified by using the agentCfg UNIX System Services shell script in the adapter_readonly_bin directory |
| Default certificate and key | Certificates must be created and installed manually. See “Configuring SSL authentication” . |
| Data set size adjustment | Temporary data set sizes in reconciliation must be adjusted according to the size of the RACF database unload for your installation. If the VSAM group file is utilized, its size must be adjusted, following an initial reconciliation. |
| VSAM file name for scoped reconciliation | A VSAM file is required to do scoped reconciliation (job ISIMVSAM). You can name the VSAM file to correspond to an adapter instance name. If scoped reconciliation is NOT performed, a VSAM file is not required, and the reconciliation transaction does not require program steps that execute ISIMGSCP. Also, a GROUP DD statement is not required for the ISIMREC2 program step. |
| Started task name | The ISIAGNT member is the sample JCL provided for the adapter startup. The component of the started task name must be indicative of the adapter instance name. The started task name must be limited to 7 characters to eliminate ambiguity when shutting down the adapter. |
| Adapter port number | The TCP/IP port number that the adapter uses. Enter this number when you configure the UNIX System Services component. Each adapter instance must have a unique TCP/IP port number. If two adapters use the same port number, only one of the adapters can be active at any one time. |
| TSO account number | A TSO account number might be required during installation because the adapter uses TSO/E for processing. |
| Installation panels | As the installation includes the panels for both the RACF and the zSecure RACF panels. The
required space for the installation panels are allocated with the following
parameters: |
| TSO Region | The configuration account requires a TSO REGION of at least 2048000 to be able to use the adapter configuration tools such as agentCfg and regis. |
Note: The screens displayed in the tasks
topics are examples. Information in the actual screens might be different.