Oracle® Application Server Adapter for CICS User's Guide 10g Release 3 (10.1.3.1.0) Part Number B31001-01 |
|
|
View PDF |
Oracle Connect includes a number of tuning parameters that can improve performance. Specifically, the daemon can be configured to optimize communication between the IBM OS/390 or z/OS platform and a client. In addition, the binding environment can be tuned to optimize the request handling.
This section contains the following topics:
The daemon workspace is responsible for allocating server processes to clients. You can configure a workspace to use a pool of server processes so that a server process is always available for a client request. Use Oracle Studio to maintain daemon and daemon workspace parameters to control the allocation of server processes and their management in a pool.
You can also have a number of daemon workspace configurations. Thus, you can create individual workspaces for use with different adapters.
Use Oracle Studio to add a new daemon configuration. You can set up different daemon configurations for different situations.
Perform the following steps to add a new daemon workspace configuration:
From the Start menu, select Programs, Oracle and then select Studio.
In the Configuration Explorer, expand the node of the computer defined in "Setting Up the IBM OS/390 or z/OS Platform in Oracle Studio".
Expand the Daemons node. The available daemon configurations are listed.
Right-click IRPCD and select New Workspace. The New Daemon Workspace screen is displayed, as shown in the following figure:
Figure 5-1 The New Daemon Workspace screen
Specify a name for the new workspace and optionally, provide a description.
Specify whether you want default settings or copy the properties of an existing workspace.
To copy the properties of an existing workspace, click Ellipsis and select the workspace from which you want to copy the properties.
Click Next. The Select Scenario screen is displayed, as shown in the following figure:
Select the Application Server using connection pooling and click Next.
Continue through the wizard, specifying the required values for the workspace.
To complete the workspace definition, click Finish.
The new workspace is displayed under the IRPCD daemon node.
You edit a workspace by using the tabs described in the following table:
Table 5-1 Workspace Definition Tabs
Tab | Description |
---|---|
WS Info |
Specifies general information including the server type, the command procedure used to start the workspace, the binding configuration associated with this workspace and the timeout parameters. |
WS Server Mode |
Specifies workspace server information including features that control the operation of the servers started up by the workspace and allocated to clients. |
WS Logging |
Specifies parameters for logging and the format to use for a log file. |
WS Security |
Specifies administration privileges, user access, ports available to access the workspace and workspace account specifications. |
WS Governing |
This tab is not applicable for use with OracleAS Adapter for CICS. |
To access these tabs, perform the following steps using Oracle Studio:
From the Start menu, select Programs, Oracle, and then select Studio.
In the Configuration Explorer, expand the computer defined in"Setting Up the IBM OS/390 or z/OS Platform in Oracle Studio".
Expand the Daemons node. The daemon configurations available on this computer are listed.
Expand the IRPCD node. The daemon workspaces are listed.
Right-click the required workspace and select Edit Workspace.
Click the required tab, which contains the information you want to edit. For full details of the tabs and the fields in these tabs, refer to "Workspaces".
After editing the workspace, click Save.
The server mode determines how the daemon starts up new processes. The daemon supports the following server modes:
singleClient
: Each client receives a dedicated server process. The account in which a server process runs is determined either by the client login information or by the specific server workspace.
This mode enables servers to run under a particular user account and isolates clients from each other (because each receives its own process). However, this server mode incurs a high overhead due to process startup times and may use a lot of server resources, as it requires as many server processes as concurrent clients).
multiClient
: Clients share a server process and are processed serially. This mode has low overhead because the server processes are already initialized. However, because clients share the same process, they may impact one another, especially if they issue lengthy queries.
The number of clients that share a process is determined by the Clients per server limit parameter (the maximum number of concurrent clients a server process for the current workspace accepts).
reusable
: This is an extension of the single client mode. Once the client processing finishes, the server process does not die and can be used by another client, reducing startup times and application startup overhead. This mode does not have the high overhead of single client mode because the servers are already initialized. However, this server mode may use a lot of server resources, as it requires as many server processes as concurrent clients).
The other modes can be set so that the server processes are reusable by setting the number of times a process can be reused with the Reuse limit
value (the maximum number of times a particular server process can be reused or how many clients it can serve before it is retired). Reuse of servers enhances performance because it eliminates the need to repeat initializations. However, reuse runs a risk of higher memory leakage over time. The default for the Reuse limit
field value is None
, indicating that no reuse limit is enforced.
Set the server mode in the WS Server tab of the daemon workspace editor, as shown in the following figure:
When using any of the server modes you can specify a pool of server processes. These server processes are started when the daemon starts and are maintained in a pool. The server processes are available for use by new client requests from the pool, saving initialization time.
Instead of starting a new server process each time one is requested by a client, the client receives a process immediately from the pool of available processes. When the client finishes processing, this server process either dies, or if reusable servers have been specified, it is returned to the pool. You set up a pool of server processes by specifying the following parameters in the WS Server tab.
Initial number of servers: The number of server processes that are prestarted for this workspace when the daemon starts up. These are available for use by new client processes with minimal initialization time. Instead of starting a new server process each time one is requested by a client, the daemon immediately allocates (to the client) a server from a pool of available servers. When the number of available server processes drops lower than the value specified in the Minimum number of available servers field, the daemon again starts server processes until the specified number of available servers is reached. The default for this parameter is 0, meaning that no servers are prestarted for this workspace.
Minimum number of available servers: The minimum number of server processes in the prestarted server's pool before the Oracle Connect daemon resumes creating new server processes (up to the number specified in the Initial number of servers field value, described earlier). If this parameter is set to a value greater than that of the Initial number of servers field value, the daemon considers the value to be the same as the value specified in the Initial number of servers field. In this case, a new server process is started and added to the pool each time a server process is removed from the pool and allocated to a client). The default for this parameter is 0, meaning that new servers are created only when there are no other available servers.
Set maximum number of servers: The maximum number of available server processes pooled for this workspace. If the server is reusable, once a client disconnects from the server, the daemon returns the server to the pool of available servers. If the limit is reached, excess server processes are discarded.
Number of sub-tasks: The number of sub-tasks for a server that are prestarted for this workspace when the daemon starts up. In addition to setting up a pool of server processes as described earlier, you can set additional server processes as sub-tasks by specifying this parameter. Thus, setting 10 servers and 10 prestarted sub-tasks results in 100 tasks started (10 sub-tasks for each process).
Each binding configuration includes the following:
Environment settings, which are used to configure the environment used by any of the adapters defined in the binding.
Application adapters on the current computer.
To configure environmental settings in Oracle Studio perform the following steps:
From the Start menu, select Programs, Oracle and then select Studio.
In the Configuration Explorer, expand the node of the computer defined in "Setting Up the IBM OS/390 or z/OS Platform in Oracle Studio".
Expand the Bindings node. The available binding configurations are listed.
Right-click NAV and select Edit Binding.
In the Properties tab edit the required environment settings as needed. To edit an environment setting, click the property category node, and then click the required value to edit.
The binding Properties tab is shown in the following figure:
The binding environment is divided into the following categories:
The following table lists the parameters that define the communication buffers:
Table 5-2 Comm Category Parameters
Parameter | Description |
---|---|
Specifies the size of a memory buffer on a client, which is used by the Oracle Connect client/server to store read-ahead data. The default is 200000 bytes. |
|
Specifies the maximum bytes that can be written in one chunk on a socket. The default is -1 (no limitation). |
|
Specifies the maximum size of an XML document held in memory. The default is 65535 bytes. |
|
Specifies the maximum size of an XML document passed to another computer. The default is 65535 bytes. |
The following table lists the parameters that define debugging and logging operations:
Table 5-3 debug Category Parameters
Parameter | Description |
---|---|
When set to |
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
|
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
When set to |
|
The high-level qualifier of the log file for messages. The following types of message are written to the log: Error messages. Trace information and information about the query optimization strategy if |
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
The following parameters define miscellaneous operations, including globalization support and the directory where temporary files are written:
Table 5-4 misc Category Parameters
Parameter | Description |
---|---|
For use with globalization support to identify the codepage for the workspace. See also: Appendix A, "Advanced Tuning of the Metadata". |
|
The data type conversion policy when a conversion error occurs:
|
|
|
This parameter is not applicable for use with OracleAS Adapter for CICS. |
Identifies the application language. A default codepage is selected based om the value specified for this parameter. See also: Appendix B, "Globalization Settings". |
|
Specifies the codepage used by a field whose data type is defined as "nlsString". Use this for a field whose codepage is other than that of the computer codepage. This parameter includes the following values: The name of the codepage. Whether the character set reads from right to left (as in middle eastern character sets). The default is set to |
|
The directory where temporary files are written, including the temporary files created for use by hash joins and for sorting files. The default is the current high-level qualifier. |
|
Determines the way 2-digit years are converted into 4-digit years. When the parameter
|
The optimizer
parameters are not applicable for use with OracleAS Adapters for CICS.
The queryProcessor
parameters are not applicable for use with OracleAS Adapters for CICS.
The following table lists the parameters that define the transaction support:
Table 5-5 Transactions Category Parameters
Parameter | Description |
---|---|
|
TBD |
|
When set to |
|
When set to |
|
When set to |
|
TBD |
|
The high-level qualifier and name of the log file that logs activity when using transactions. The |
|
TBD |
|
The number of minutes from the start of a transaction before any recovery operation on that transaction can be attempted. The default is 15 minutes. |
|
Specifies the amnount of time to wait for a pending transaction to complete. This parameter is used when working under MS DTC where DTC is the transaction coordinator. A value of zero indicates a wait time of 1 msec. |
|
This parameter is not applicable for use with OracleAS Adapters for CICS. |
You can migrate an adapter configuration from one platform to another. The configuration information is stored in the Oracle Connect repository on the source platform and is exported to an XML file which can then be imported to the target platform.
Note that when migrating a configuration, any file names and paths that are specific to the source platform must be changed to valid files on the target platform.
Perform the following steps to migrate an adapter configuration using Oracle Studio.
From the Start menu, select Programs, Oracle and then select Studio.
In the Configuration Explorer, right-click the computer defined in "Setting Up the IBM OS/390 or z/OS Platform in Oracle Studio" and select Export XML definitions.
Specify the path and name of the XML file, which stores the XML representation and complete configuration.
Edit any paths in the XML definition to the paths required on the target platform. For example, the setting for the serverLogFile
parameter may need changing, depending on the platform.
Set up the target platform in Oracle Studio in the same way you set up the source platform, as described in "Setting Up the IBM OS/390 or z/OS Platform in Oracle Studio".
In the Configuration Explorer, right-click the target computer and select Import XML definitions.
Import the XML file to the target platform.
Oracle Connect works within the confines of the legacy platform security system. For example, on an OS/390 computer with RACF installed, and with the workspace server mode set to multi-tasking
, a RACROUTE VERIFY
is performed for each task in the address space, according to the client connection.
In addition, Oracle Connect provides the following security components:
A binary XML encryption mechanism, which is activated as follows:
The client's first message to the server includes a pre-defined shared key, includeing the key name and value in the connection string. The server gets the key value for the key name passed from the client from the native object store (NOS).
The server generates a random 128-bit RC4 session key which is returned encrypted to the client, using the shared key. If no predefined shared key is provided, then a predefined, hardcoded key is used (this key is hardcoded on the client and on the server).
Passwords are always encrypted when passed over the wire, using an RC4, 128-bit session key, regardless of whether the entire session is encrypted or not.
If a predefined shared key was provided, then the entire session is encrypted. Otherwise, only the password exchange is encrypted (using the hardcoded key).
Credentials: Passwords and usernames exchanged over the network are encrypted using a pre-defined, hardcoded, 128-bit RC4 session key.
Design Time: Security within Oracle Studio to grant access to Oracle Studio itself and to grant access to computers, user profiles and workspaces.
Run-time: Security used to access resources from an application, including encryption over the network and controlling the daemon for the access.
Setting design time security is described in the following sections:
Securing access to Oracle Studio is described in "Setting Password Access to Oracle Studio".
Securing rights to configure a computer in Oracle Studio is described in "Specifying Users with Administrative Rights".
Securing access to user profiles is accomplished by right-clicking the relevant user profile in Oracle Studio and selecting Change Master Password. In the dialog box that is displayed, specify a password that must be provided in the future to edit the specific user profile.
Securing access to workspaces is accomplished by right-clicking the relevant workspace in Oracle Studio and selecting Set Authorization. In the dialog box that opens, specify a valid user and password that must be provided in the future to edit the specific workspace.
During run-time, security considerations are implemented as follows:
When the client request accesses the legacy platform through the daemon, either anonymous access is allowed or a valid user name and password must be provided for the computer in the user profile. The userName
and password
properties in the J2CA 1.5 CICS adapter are used at this stage to access the daemon.
Note:
The user name used to access the daemon must also be the name of a user profile used.Access by the client must be through a valid port, according to the list of ports specified in the Workspace Access section of the WS Security tab in Oracle Studio. See "WS Security".
Note:
Access to the legacy platform through a firewall using the NAT protocol is specified when the computer is added to Oracle Studio.To be allocated a server process, the client must be granted anonymous access to the workspace or be listed in the Workspace Users section of the WS Security tab in Oracle Studio. See "WS Security".
To access a server through a firewall, the daemon must be specified with a range of port numbers that are recognized by Oracle Connect. This is specified in the Enable Port Range section of the WS Security tab in Oracle Studio. See "WS Security".
The ability to run commands on the daemon, such as starting or stopping a daemon or ending server processes is available only to administrators who have been registered in Oracle Connect as a daemon administrator. A client is registered as a valid daemon administrator in the Daemon Security tab in Oracle Studio, as described in "Daemon Security".
Note:
You can also specify administrators who can run commands only at the level of the workspace. Specify these administrators in the WS Security tab, as described in "WS Security".OracleAS Adapters for CICS supports global transactions and can fully participate in a distributed transaction.
Note:
To use OracleAS Adapters for CICS with 2PC, you must have RRS installed and configured.To work with global transactions, set the convertAllToDistributed
transaction environment property to true
, as shown in the following figure:
Figure 5-5 The NAV binding Properties tab
To use the global transaction capability to access data on the OS/390 or z/OS computer, define every library in the ATTSRVR JCL as an APF-authorized library.
To define a DSN as APF-authorized, in the SDSF screen enter the command:
"/setprog apf,add,dsn=instroot.library,volume=ac002"
Where ac002 is the volume where you installed Oracle Connect and INSTROOT is the high level qualifier where Oracle Connect is installed.
If the Oracle Connect installation volume is managed by SMS, then when defining APF-authorization, enter the following command in the SDSF screen:
"/setprog apf,add,dsn=instroot.library,SMS"
Make sure that the library is APF-authorized, even after an IPL (restart) of the computer.
If RRS is not running, then OracleAS Adapters for CICS can participate in a distributed transaction, as the only one-phase commit resource, only if the logFile
transaction environment property includes the keyword NORRS
, as shown in the following figure:
Note:
If a log file is not specified, then the format for thelogFile
parameter when RRS is not running is: ,NORRS
.