Upload
others
View
8
Download
0
Embed Size (px)
Citation preview
Copyright IBM 2005, 2008
SME versus DSME:A Comparison
Johnathan Harterz/OS CommServer Development
1
Copyright IBM 2005, 2008
Agenda
Introduction
When Are The SME And DSME Invoked?
SME And DSME Parameter Lists
SME And DSME Return Codes
Closing Remarks
2
Copyright IBM 2005, 2008
SME And DSME Comparison - Introduction
SME
Called By Session Services (SSCP)
Subarea-side function
Uses synchronous PAB
Called During Session Establishment
Init, CDInit, InitOtherCD, BIND and RouteSetup RUs
Called With Subarea Information
Can Be Traced Using MODIFY TRACE,TYPE=EXIT,ID=ISTEXCAA
DSME
Called By Directory Services (CP)
APPN-side function
Uses asynchronous PAB
Called During Search Processing
Internal search or external Locate
No knowledge of sessions!
Called With APPN Information
Can Be Traced Using MODIFY TRACE,TYPE=EXIT,ID=ISTEXCDM
Note: Application GDS Variable is included in DSME trace
3
Copyright IBM 2005, 2008
SME And DSME Comparison - Functions
SME Similar functions
BeginInitial AuthorizationSecondary AuthorizationADJSSCP SelectionGW Path SelectionExit ReplacementExit ReplacedEnd
Other functionsAlias Name SelectionInitial AccountingFinal AccountingXRF Session SwitchLEN ALS SelectionVirtual Route SelectionHPR VR Selection
DSME Similar functions
BeginInitial AuthorizationRedrive Initial AuthorizationBorder Node SelectionICN Selection (V1R8 and above)Exit ReplacingExit ReplacedEnd
Other functionsAPAR OA12411 (V1R7) allows DMSE to convert non-authentic NETIDs to authentic NETIDsCDServer SelectionAlternate CDServer SelectionCentral Resource Registration Selection
4
Copyright IBM 2005, 2008
Agenda
Introduction
When Are The SME And DSME Invoked?
SME And DSME Parameter Lists
SME And DSME Return Codes
Closing Remarks
5
Copyright IBM 2005, 2008
SME/DSME Invocation: Subarea PLU-Init
SSCP-SSCP
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
(a) (a)
(b)(b)
SSCP-SSCP SSCP-SSCP
(a)
(b)
SSCP CSSCP A SSCP B SSCP D
(a,b)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
6
Copyright IBM 2005, 2008
SME/DSME Invocation: Subarea SLU-Init
SSCP-SSCP
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
(a) (a)
(b)(b)
SSCP-SSCP SSCP-SSCP
(a)
(b)
SSCP CSSCP A SSCP B SSCP D
(a,b)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
7
Copyright IBM 2005, 2008
SME/DSME Invocation: Subarea/LEN PLU-Init
SSCP CSSCP A
SSCP-SSCP LEN LEN
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
SSCP B SSCP D
(a)
(b)(a,b) (a,b)
(a,b)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
8
Copyright IBM 2005, 2008
SME/DSME Invocation: SA/APPN PLU-Init (ISR)
SSCP-SSCP APPN APPN
Locate Req
Locate Rpy
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
CP C
SSCP CSSCP A
CP B
SSCP B
CP D
SSCP D
(a) (a)
(b)(b) (a,b)
(c) (c) (c)
(a,b)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
9
Copyright IBM 2005, 2008
SME/DSME Invocation: SA/APPN PLU-Init (HPR)
SSCP-SSCP APPN APPN
Locate,Find
Locate,Found
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
CP C1
SSCPC1
SSCP A
CP B
SSCP B
CP D
SSCP D
(a) (a)
(b)(b) (a,b)
(c) (c) (c)
CP C2
SSCPC2
(c)
(a,b)
(RTP1) (RTP2)
(ANRonly)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
10
Copyright IBM 2005, 2008
SME/DSME Invocation: SA/APPN SLU-Init (ISR)
SSCP-SSCP APPN APPN
Locate Req
Locate Rpy
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
CP C
SSCP CSSCP A
CP B
SSCP B
CP D
SSCP D
(a) (a)
(b)(b)(a,b)
(c) (c) (c)
(a,b)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
11
Copyright IBM 2005, 2008
CP C1
SSCPC1
SME/DSME Invocation: SA/APPN SLU-Init (HPR)
SSCP-SSCP APPN APPN
Locate Req
Locate Rpy
CDINIT Req
CDINIT Rsp
BIND Req
BIND Rsp
SSCP A
CP B
SSCP B
CP D
SSCP D
(a) (a)
(b)(b)(a,b)
(c) (c)(c)
CP C2
SSCPC2
(c)
(a,b)(ANRonly)
(RTP1) (RTP2)
Legend:
(a) SME Init Auth
(b) SME Sec Auth
(c) DSME Init Auth
12
Copyright IBM 2005, 2008
Agenda
Introduction
When Are The SME And DSME Invoked?
SME And DSME Parameter Lists
SME And DSME Return Codes
Closing Remarks
13
Copyright IBM 2005, 2008
SME And DSME Comparison - Parameter Data
SME Similar parameter data
Environment InformationFunction CodeRelated Session InformationExit User DataPLU & SLU (& ILU) InformationSession Correlator (PCID)OLU (& DLU) Adjacent SSCPADJSSCP Name List
Other parameter dataSession Management User DataExit Services Parmlist (For Msgs)OLU (& DLU) Gateway NCPSession User DataSession Authorization (CV x'59')TCP/IP Information (CV x'64')
DSME Similar parameter data
Environment InformationFunction CodeRelated Search InformationExit User DataOLU & DLU InformationSearch Correlator (PCID & Modifier)OLU Adjacent CPSubnetwork Routing List (SRL)ICN List (V1R8 and above)
Other parameter dataDSME User Data (User Supplied Parameter List)Search Task ListApplication GDS Variable
Copy of Cdinit, InitOtherCD or NotifyOnly if requested during Begin
14
Copyright IBM 2005, 2008
SME And DSME - Environment Information
SMENetwork Identifier (NETID=)
SSCP Name (SSCPNAME=)
Host PU Name
OLU Adjacent NETID
DLU Adjacent NETID
VTAM Release
DSMENetwork Identifier (NETID=)
CP Name (SSCPNAME=)
Node CharacteristicsNN, EN, ICN, CDS, EBN
15
Copyright IBM 2005, 2008
SME And DSME - Related Information
SME - Session InformationXRF Backup
Autologon, PLU-Init, SLU-Init or 3rd-Party-Init
DLU Network ID Assumed
Invoked For CDINIT, DSRLST Or InitOtherCD (Request or Response)
SME Driven For Takeover Session, MNPS Recovery Session
SSCP Node RoleILU, OLU, DLU or INN
Resource Discovery Search (RDS)
CP-CP Session
Surprise Session From DLUR SLU
VTAM Exit Services Available
DSME - Search InformationDLU Name Authenticity (Alias/Real, Generic/Real, Name Change Support)
APAR OA12411 (V1R7) allows DSME to convert non-authentic NETIDs to authentic NETIDs
CP's Node RoleCP and/or NNS of OLU and/or DLUODS, ADS, ICN and/or INN
Search OriginFrom subareaOver an intersubnetwork link (ISL)From an EN, NN or EBN
Resource Discovery Search (RDS)
SLU-Init Scout Search
Application GDS VariableFlags indicating Cdinit, InitOtherCD, Notify or none
16
Copyright IBM 2005, 2008
SME And DSME - Resource (LU) Information
SME - PLU, SLU, ILU InfoSSCP Visit Count
Flags (Name Translation, Target LU, Uservar type)
Owning SSCP Name
LU Real NETID And Name
LU Alias NETID And Name
LU Network AddressesNative, OLU and/or DLU networks
LU Hierarchy (RDTE Structure)
LU Tables (Interpret, Logmode, USS)
LU Associated ResourcesOwning And/Or Adjacent CPs
LU Adjacent Link Station Is ISL
DSME - OLU, DLU Info
Directory Database Hierarchy
Network-Qualified LU Name
Network-Qualified CP Name
Network-Qualified NNS Name
17
Copyright IBM 2005, 2008
Agenda
Introduction
When Are The SME And DSME Invoked?
SME And DSME Parameter Lists
SME And DSME Return Codes
Closing Remarks
18
Copyright IBM 2005, 2008
SME - Return codes
Initial Authorizationx'00' - Session authorized (completely); Secondary Authorization not requiredx'04' - Session authorized (for now); Secondary Authorization requiredx'06' - Session authorized (completely); Secondary Authorization required only if session establishment failsx'08' - Session not authorized; fail session; do not allow reroutingx'0C' - Session not authorized; fail session; allow rerouting by sending SSCPother - Invalid return code; session fails (treated like x'08')
Secondary Authorizationx'00' - Session authorized (completely)x'08' - Session not authorized; fail session; do not allow reroutingother - Invalid return code; session fails (treated like x'08')
Adjacent SSCP Selectionx'00' - Use SSCP Name List provided by exit routine (modified or not)x'04' - Use original SSCP Name List provided by VTAMx'08' - Session not authorized; fail session; do not allow reroutingx'0C' - Session not authorized; fail session; allow rerouting by sending SSCPother - Invalid return code; use original SSCP Name List (treated like x'04')
19
Copyright IBM 2005, 2008
DSME - Return codes
Initial Authorization (see table in z/OS CommServer SNA Customization)x'00' - Search authorized; allow all APPN searchingx'04' - Search not authorized; search fails; allow rerouting by sending CPx'08' - Search authorized; allow search of served ENs onlyx'0C' - Search authorized; allow search of served ENs & subarea through this ICN onlyx'10' - Search authorized; allow all APPN searching except subarea through this ICNx'14' - Search authorized; allow all APPN searching except subarea through other ICNsx'18' - Search authorized; allow all APPN searching except subarea through any ICNx'1C' - Search authorized; allow search of served ENs & subarea through any ICN onlyx'20' - Search authorized; allow directed searches only (no trial-and-error searching)x'24' - Search authorized; use Search Task List provided by exit (modified or not)x'28' - Reject directed search on redrive of Initial Authorization; continue searchingother - Invalid return code; search fails; allow rerouting by sending CP (treated like x'04')
Border Node Selection and Interchange Node Selectionx'00' - Use SRL or ICN List provided by exit (modified or not)x'04' - Use original SRL or ICN List provided by VTAMx'08' - EBN or ICN Searching not allowed; search fails; allow rerouting by sending CPother - Invalid return code; use original SRL or ICN List (treated like x'04')
20
Copyright IBM 2005, 2008
Agenda
Introduction
When Are The SME And DSME Invoked?
SME And DSME Parameter Lists
SME And DSME Return Codes
Closing Remarks
21
Copyright IBM 2005, 2008
BNDYN=NONE Versus DSMEIf I am already using BNDYN=NONE and customized ADJCLUST tables to eliminate unwanted APPN searching, why might I also need a Directory Services Management Exit (DSME)?
BNDYN=NONE allows you to control when searches are sent from your network into adjacent subnetworksBut BNDYN=NONE does NOT control when searches from adjacent subnetworks are sent into your network!DSME allows you to control how much searching is performed for ALL searches
Allows other information to be used as validation criteria (like OLU name/netid, real versus alias target LU name, adjacent CP name/netid in the OLU direction, etc.)
Many Customers May No Longer Need a DSME!!!z/OS CS V1R8: ALIASRCH=YES or NO On ADJCPs: Allows customers to control (on an adjacent non-native node basis) whether ALIAS searches are allowed to enter their network
Coming in z/OS CS V1R10: AUTHNETS=(NET1,NET2, ...) On ADJCPs: Allows customers to control (on an adjacent non-native node basis) what target LU NETID(s) are allowed on network-qualified searches entering their network
APPNNETA
EBNA1
APPNNETB
EBNB1
EBNB2
APPNNETC
EBNC1
Trusted Untrusted
************************************************************* Adjacent CP Major Node for NETA.A1 ************************************************************** ADJCPA1 VBUILD TYPE=ADJCP B1 ADJCP NETID=NETB,ALIASRCH=NO,AUTHNETS=NETAB2 ADJCP NETID=NETB,ALIASRCH=NO,AUTHNETS=(NETA,NETC)C1 ADJCP NETID=NETC,ALIASRCH=YESD1 ADJCP NETID=NETD,ALIASRCH=NO,AUTHNETS=
22
Copyright IBM 2005, 2008
Did You Know That:
SMEs And DSMEs Can Be Replaced Non-Disruptively?SMEs and DSMEs can choose to be called before and/or after they are replaced.
Using SMEs And DSMEs Does Not Requires Much CPU?Assuming that exit routines are well written and well behaved
A sample skeleton DSME is now available on the internet?
Little Known Facts About SMEs And DSMEs
http://www.ibm.com/support/docview.wss?rs=852&context=SSSN3L&dc=D400&uid=swg24014056&loc=en_US&cs=utf-8&lang=en
23
Copyright IBM 2005, 2008
For More Information...
URL Contenthttp://www.ibm.com/systems/z/ IBM System z
http://www.ibm.com/systems/z/hardware/networking/index.html IBM System z Networking
http://www.ibm.com/software/network/commserver/zos/ IBM z/OS Communications Server
http://www.ibm.com/software/network/commserver/z_lin/ IBM Communications Server for Linux on zSeries
http://www.ibm.com/software/network/ccl/ IBM Communication Controller for Linux on System z
http://www.ibm.com/software/network/commserver/library IBM Communications Server Library - white papers, product documentation, etc.
http://www.redbooks.ibm.com IBM Redbooks
http://www.ibm.com/software/network/commserver/support IBM Communications Server Technical Support
http://www.ibm.com/support/techdocs/ Technical Support Documentation (techdocs, flashes, presentations, white papers, etc.)
http://www.rfc-editor.org/rfcsearch.html Request For Comments (RFCs)
http://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsp IBM Education Assistant
24