Table 1 lists TuxJES commands and functions.
genjesprofile generates the TuxJES system security profile. When
genjesprofile is launched, you are prompted to enter the Oracle Tuxedo application password, user name, user password, the database connection string for
MT_DB_LOGIN, the database connection string for
MT_GDG_DB_ACCESS, the database connection string for
MT_DB_LOGIN2, and the database connection string for
MT_CATALOG_DB_LOGIN, and the ftp password for
MT_FTP_PASS.
genjesacl - Generates the encrypted job access authorization configuration file for TuxJES system.
genjesacl reads plain rules from STDIN line by line until EOF (pressing Ctrl+D at the beginning of the line in terminal can produce EOF), and then generates an encrypted configuration file. It must be used when
JES_ACL_FILE_TYPE=ENCRYPTED is specified.
genjesacl supports the following parameters and options:
gensysprofile – Generates file to encrypt and store TuxJES Database connection information.
gensysprofile generates file to encrypt and store TuxJES Database connection information.
Specifies JESROOT directory, where this file is to be generated.
artjesadmin is the TuxJES command interface.The TuxJES system must be started first.
artjesadmin supports the following parameters and options:
Option -h prints
artjesadmin usage information as listed above.
Option -v indicates the current version of Oracle Tuxedo Application Runtime for Batch.
The security profile file generated by genjesprofile. The default value is
~/.tuxAppProfile. It requires the owner of the security profile must be the user who runs
artjesadmin. The user name in this profile is the owner of the submitted jobs. A job without a specified owner is assigned the owner name "*".
|
•
|
If -f profile is specified, the specified profile file will be used;
|
|
•
|
If -f is specified while profile is not, ~/.tuxAppProfile will be used as the profile file;
|
If -f is not specified, nothing will be used as the profile file.
Option -p and
-j are added to get job status without interaction in
artjesadmin console.
Table 2 lists the exit codes for
artjesadmin if
-p is specified.
Option -x is specified to control
ARTJESINITIATOR servers. It must be
showjobexec,
resumejobexec, or
stopjobexec. For more information, see
Sub Commands.
Option -t <timeout> is specified to control the timeout threshold when submitting a job in synchronous mode, asynchronous mode, or console mode. With
-t option, an integer can be specified to control the timeout. If no timer is specified, clients will wait forever.
Option -T is specified to submit a job in test mode, which only do checks rather than executing this job. For more information about test mode, see
-t file|NULL argument in
EJR Syntax.
Option -y is added to submit a job in the synchronous way. This option enables synchronous mode to wait for job end.
Table 4 lists the exit codes for
artjesadmin if
-y is specified.
Option -i is specified to submit KSH jobs.
scriptfile should be full path or relative path to
APPDIR environment variable, or to
JOBREPOSITORY configuration item.
Option -I is specified to submit JCL jobs.
scriptfile should be full path or relative path to
APPDIR environment variable, or to
JOBREPOSITORY configuration item.
Option -x settracelevel is specified to set the TuxJES trace message level. For more information, see
Sub Commands.
Option -x setjesacl is specified to change job access authorization. For more information, see
Sub Commands.
|
Note:
|
artjesadmin is not responsible for scriptfile propagation. It must be located on a shared file system if the conversion and execution are not on same machines. The options are as follows:
|
|
•
|
-t timeout: Specifies to control the timeout threshold when submitting a job.
|
|
•
|
-o ejr option: Specifies the options passed to the EJR script file. For example, -f ejr option ( -o "-f envfile") can be used to pass an environment file to KSH job; -e ejr option ( -o "-e envfile") can be used to pass an environment file to JCL job.
|
Stops ARTJESINITIATOR servers from picking up a new job to execute; the server continue finishing current jobs. If no option is specified, all
ARTJESINITIATOR servers stop picking up new jobs.
Resume ARTJESINITIATOR servers pick up of new jobs to execute. If no option is specified, all
ARTJESINITIATOR servers resume picking up new jobs.
If none of the machine,
groupid, and
serverid parameter is specified, the
artjesadmin will change the TuxJES trace message level of the current client and all servers that your
UBBCONFIG SERVERS section specifies. Once you specify one or more parameters, the
artjesadmin will only change the TuxJES trace message level of the servers that you specifies; the current client will not be changed.
artjesadmin also supports direct job submission using the following format:
artjesadmin [-o='xxx'] -i/-I scriptfile.
artjesadmin has a return code different from zero if there is an error occurs as listed in
Table 6.
-n jobname: Display jobs with given job name
-j jobid: Display a particular job information
-m: Print the CPU time usage of each step in one JOB
-l: Display the number of jobs for each job class in each job status type
|
Note:
|
-l option is not supported when you use /Q to store and manage metadata of Batch jobs.
|
|
•
|
JobID: The job ID generated by TuxJES system
|
|
•
|
Type: the job type (JCL or KSH)
|
|
•
|
CONVING: a job waiting for conversion
|
|
•
|
WAITING: a job waiting for execution.
|
|
•
|
DONE: a job finished successfully.
|
|
•
|
FAIL: a job finished but failed
|
|
•
|
INDOUBT: a job is in doubt state due to its initiator restarted
|
-n jobname: Hold jobs with given job name
-j jobid: Hold a particular job
Releases the jobs in HOLD_WAITING or
HOLD_CONVING status so that they can be picked up by
ARTJESCONV for conversion or
ARTJESINITIATOR for running. The options are as follows:
-n jobname: Release jobs with given job name
-j jobid: Release a particular job
-n jobname: Cancel jobs with given job name
-j jobid: Cancel a particular job
-n jobname: Purge jobs with given job name
-j jobid: Purge a particular job
-g groupname: the Tuxedo group name of the
ARTJESINITIATOR server
-i serverid: the Tuxedo server id of the
ARTJESINITIATOR server
-g groupname: the Tuxedo group name of the
ARTJESINITIATOR server
-i serverid: the Tuxedo server id of the
ARTJESINITIATOR server
C: job conversion complete event; the event name is
ARTJES_JOBCVT
E: job execution finish event; the event name is
ARTJES_JOBEXEC
P: job purge event; the event name is
ARTJES_ARTJESPURGE
L: job cancel completed event; the event name is
ARTJES_JOBCANCEL
A: all supported events. If the event is set to "on", A is the default.
on |off: The submission is on or off. the "on" setting can be used with the
-t option. "off" will unsubscribe all event subscriptions.
artjescleanlock – The utility to clean stale lock records in lock files in MP mode.
Artjescleanlock, based on the filter criteria specified by its options, is used to list or clean lock records in lock files. Before running this utility, environment variable
MT_ACC_FILEPATH must be set properly.
ARTJESADM is an Oracle Tuxedo application server provided by TuxJES. The
artjesadmin command communicates with
ARTJESADM for most tasks.
ARTJESADM must be configured in the UBBCONFIG file in front of other TuxJES servers since others they access services provided by
ARTJESADM. If
JESCONFIG is changed, all TuxJES related servers must be restarted for new configurations to take effect.
ARTJESADM supports the following parameters and options:
JESCONFIG represents the full path name of the TuxJES system configuration file. It allows the following parameters:
S: Job submission event. Event name:
ARTJES_JOBSUBMIT
C: Job conversion complete event. Event name:
ARTJES_JOBCVT
E: Job execution finish event. Event name:
ARTJES_JOBFINISH
P: Job purge event. Event name:
ARTJES_JOBPURGE
L: Job cancel completed event. Event Name:
ARTJES_JOBCANCEL
If EVENTPOST is not specified, no events are posted. The data buffer with event pos is FML32 type and the fields are defined in JESDIR/include/jesflds.h.
The format of JES_ACL_FILE file. It can be set as
PLAIN or
ENCRYPTED (case insensitive).
PLAIN means
JES_ACL_FILE file is plain while
ENCRYPTED means this file is encrypted. The encrypted file can be generated by
genjesacl tool. The default value is
PLAIN.
The action when no matching rule is found for the tuple of user, operation, and job in JES_ACL_FILE. It can be set as
MAC or
DAC.
MAC (Mandatory Access Control) means all operations are denied if no matching rule is found while
DAC (Discretionary Access Control) means all operations are allowed if no matching rule is found.
MAC is the default value. If
JES_ACL_MODE is configured to invalid values, server
ARTJESADM cannot boot up.
NONE: Default value. Indicates jobs are executed by the OS user who starts JES system. This is compatible with all previous implementations on JES system.
USER_IDENTICAL: Indicates jobs are executed by the
Oracle Tuxedo user with which JES client joins JES system. Make sure that each Oracle Tuxedo user corresponds to an existing OS user before you choose this value.
USER_MAPPING: When this value is specified, the JES system looks up the TuxJES user mapping file and finds out the OS user corresponding to the Oracle Tuxedo user with which JES client joins JES system, and then appoints this OS user as the job executor.
ARTJESINITIATOR is an Oracle Tuxedo application server provided the TuxJES. It is responsible for invoking the EJR to execute the jobs.
Once a ARTJESINITIATOR is killed or shutdown while it has job running, it will put the job in the
INDOUBT state when it is restarted.
Specifies the job classes this ARTJESINITIATOR server is associated. If this option is not specified,
ARTJESINITIATOR associates with all job classes.
In this example, ten ARTJESINITIATOR instances are configured and are associated with the
"A",
"H" and
"Z" job classes.
ARTJESCOBOLDB2MF – TuxJES COBOL server for invoking user programs (compiled by Micro Focus COBOL) that can access to DB2
ARTJESCOBOLDB2MF is a TuxJES COBOL server for invoking user programs (compiled by Micro Focus COBOL) that can access to DB2. Do the followings to configure Oracle Tuxedo for accessing DB2 database.
|
|
|
|
|
|
|
|
|
|
|
Use cobcall with default CANCEL behavior.
|
|
|
Use cobcall with physical CANCEL behavior.
|
|
|
Use cobcall with logical CANCEL behavior. Physically cancel .dll code and shared object code as part of a logical cancel operation.
|
|
|
Use cobcall with logical CANCEL. Do not physically cancel .dll code and shared object code as part of a logical cancel operation.
|
|
|
Use cobcall without CANCEL behavior.
|
ARTJESCOBOLDB2CIT – TuxJES COBOL server for invoking user programs (compiled by COBOL-IT COBOL) that can access to DB2
ARTJESCOBOLDB2CIT is a TuxJES COBOL server for invoking user programs (compiled by COBOL-IT COBOL) that can access to DB2. Do the followings to configure Oracle Tuxedo for accessing DB2 database.
|
|
|
|
|
|
|
|
When a batch job is submitted to the TuxJES system, it is put in the conversion queue first. There is only one conversion queue in the system. A converted job is moved from the "conversion queue" to the "execution queue". The jobs in the queue are processed in FIFO order.
|
|
|
This queue is necessary if NJESUPPORT is enabled in jesconfig file. This queue maintains the mapping of each job and its execution group when the job is in the Execution Queue.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Table 9 lists the terms you need to know for a good understanding of the user substitution feature described in this section.
|
|
|
When artjesadmin is executed with...
|
When PRIVILEGE_MODE is set to...
|
|
|
|
|
|
|
USER_IDENTICAL or USER_MAPPING
|
|
Note:
|
Oracle Tuxedo SECURITY parameter must be set to USER_AUTH, ACL or MANDATORY_ACL, otherwise JES system fails to start up and the following error message is printed into ULOG: "ERROR: The current Tuxedo security level disallow the given privilege mode".
|
|
|
|
|
|
|
|
USER_IDENTICAL or USER_MAPPING
|
artjesadmin fails to login and the following error message is displayed: "ERROR: failed to join application."
|
Table 11 and
Table 12 show the permissions of users with different identities when operating jobs in TuxJES system enabling the user substitution.
The value of PRIVILEGE_MODE in
JESCONFIG should be specified to
MAPPING_CREDENTIAL or
IDENTITY_CREDENTIAL.
If the value of PRIVILEGE_MODE in
JESCONFIG is
MAPPING_CREDENTIAL, the value of
USER_MAPPING_FILE should be specified and the user mapping file should contain the mapping between
Oracle Tuxedo users and OS users.
|
•
|
Execute tmboot by root when JES system is running on the master machine of a MP domain.
|
|
•
|
Execute tlisten by root when JES system is running on a slave machine of a MP environment.
|
The SECURITY parameter in
RESOURCE section of
TUXCONFIG should be
USER_AUTH,
ACL or
MANDATORY_ACL.
|
Note:
|
If SECURITY parameter is set to APP_PW and AUTHSVC parameter is configured, the SECURITY level is regarded as USER_AUTH by Oracle Tuxedo.
|
There are four TuxJES trace messages levels: ERROR,
WARN,
INFO, and
DEBUG.
WARN is used by default. You can use environment variable
JESTRACE to set the TuxJES trace message level, or use command
artjesadmin to dynamically change it, determining which level of messages will be displayed.
ARTJESADM server provides the following ATMI services as the job handling entries. Client programs can call these services using standard ATMI APIs, such as
tpcall with FML32 buffer, in which the fields are prepared or retrieved for input and output.
|
Note:
|
If JES2_JOB_OWNER is not specified, this job is deemed to " *" user, meaning no ownership of this job.
|
|
•
|
JES2_JOB_ID (if it is specified, only this job will be retrieved)
|
|
•
|
JES2_JOB_NAME (if it is specified, only the jobs of this name will be retrieved)
|
|
•
|
JES2_JOB_CLASS (if it is specified, only the jobs of this class will be retrieved)
|
|
Note:
|
ARTJESADM checks fields in the sequence of job ID, name, and class; once a field is checked, ARTJESADM stops checking.
|
|
•
|
JES2_JOB_ID (if it is specified, only this job will be held)
|
|
•
|
JES2_JOB_NAME (if it is specified, only the jobs of this name will be held)
|
|
•
|
JES2_JOB_CLASS (if it is specified, only the jobs of this class will be held)
|
|
Note:
|
ARTJESADM checks fields in the sequence of job ID, name, and class; once a field is checked, ARTJESADM stops checking.
|
|
•
|
JES2_JOB_ID (if it is specified, only this job will be released)
|
|
•
|
JES2_JOB_NAME (if it is specified, only the jobs of this name will be released)
|
|
•
|
JES2_JOB_CLASS (if it is specified, only the jobs of this class will be released)
|
|
Note:
|
ARTJESADM checks fields in the sequence of job ID, name, and class; once a field is checked, ARTJESADM stops checking.
|
|
•
|
JES2_JOB_ID (if it is specified, only this job will be canceled)
|
|
•
|
JES2_JOB_NAME (if it is specified, only the jobs of this name will be canceled)
|
|
•
|
JES2_JOB_CLASS (if it is specified, only the jobs of this class will be canceled)
|
|
Note:
|
ARTJESADM checks fields in the sequence of job ID, name, and class; once a field is checked, ARTJESADM stops checking.
|
|
•
|
JES2_JOB_ID (if it is specified, only this job will be purged)
|
|
•
|
JES2_JOB_NAME (if it is specified, only the jobs of this name will be purged)
|
|
•
|
JES2_JOB_CLASS (if it is specified, only the jobs of this class will be purged)
|
|
Note:
|
ARTJESADM checks fields in the sequence of job ID, name, and class; once a field is checked, ARTJESADM stops checking.
|