RKTools installation: Difference between revisions

From m204wiki
Jump to navigation Jump to search
m (add link)
 
(46 intermediate revisions by 3 users not shown)
Line 4: Line 4:
As of RKTools V7.7, all Rocket-provided, SOUL-based tools are consolidated in the <code>M204PROC</code> procedure file. <code>M204PROC</code> includes all components from RKTools 7.5 in addition to Dictionary/204 and the [[SQL catalog#Generating DDL with SQL utilities|SQL Server utilities]]. This means that all Model&nbsp;204 SOUL tools provided by Rocket are in a single file.  
As of RKTools V7.7, all Rocket-provided, SOUL-based tools are consolidated in the <code>M204PROC</code> procedure file. <code>M204PROC</code> includes all components from RKTools 7.5 in addition to Dictionary/204 and the [[SQL catalog#Generating DDL with SQL utilities|SQL Server utilities]]. This means that all Model&nbsp;204 SOUL tools provided by Rocket are in a single file.  


<p class="note"><b>Tip:</b> The RKTools 7.7 installation process modifies the application subsystem definitions to point to the <code>M204PROC</code> file. If you might want to switch back to the previous version of RKTools, you should keep a backup of your current <code>SIRIUS</code> file and your current <code>CCASYS</code> file (though you can also change the subsystem definitions manually using [[SUBSYSMGMT]]).</p>
<p class="note"><b>Note:</b> Since the RKTools 7.7 installation process modifies the application subsystem definitions to point to the <code>M204PROC</code> file, sites that are upgrading must perform a full installation and not merely an <code>M204PROC</code> file overlay. To allow for a switch back to RKTools 7.5, keep a backup of your current <code>SIRIUS</code> file and your current <code>CCASYS</code> file (though you can also change the subsystem definitions manually using [[SUBSYSMGMT]]).</p>


Installing <var class="product">RKTools</var> requires downloading the <code>M204PROC</code> file from the <var class="product">Model&nbsp;204</var> maintenance website, restoring it to your environment, setting up some subsidiary <var class="product">Model&nbsp;204</var> files, and verifying that the environment has the appropriate parameter settings.
Installing <var class="product">RKTools</var> requires downloading the <code>M204PROC</code> file from the <var class="product">Model&nbsp;204</var> maintenance website, restoring it to your environment, setting up some subsidiary <var class="product">Model&nbsp;204</var> files, and verifying that the Online environment has the appropriate parameter settings. Then you run a single procedure that installs or upgrades the RKTools subsystems.


Once the installation is complete, upgrades to <var class="product">RKTools</var> can almost always be handled by restoring a fresh copy of the <code>M204PROC</code> file.
Once the installation is complete, upgrades to <var class="product">RKTools</var> can almost always be handled by restoring a fresh copy of the <code>M204PROC</code> file.
===Dictionary/204===
Because all Rocket Model&nbsp;204 procedures are in one file in V7.7, including those for [[Dictionary/204 overview|Dictionary/204]], review the [[Dictionary/204 installation guide]] to see what steps, if any, related to the Dictionary/204 tools (SUBSYSMGMT, [[FILEMGMT overview|FILEMGMT]], and so on) might need to be run in addition to the RKTools installation.


==Download the installation file==
==Download the installation file==
Line 18: Line 15:
To download from the Rocket website:
To download from the Rocket website:
<ol>
<ol>
<li>On the [https://m204.rocketsoftware.com/ Rocket M204 Customer Care] page, go to the "Downloads and Uploads" section and select the "Download SOUL files" link to access the "SOUL files for Rocket Software" page.  
<li>On the "Rocket M204 Customer Care" page ([http://m204.rocketsoftware.com/ http://m204.rocketsoftware.com]), go to the "Downloads and Uploads" section and select the "Download SOUL files" link to access the "SOUL files for Rocket Software" page.  


<li>Log in, and download the version of RKTools that is compatible with your version of Model 204. The procfile contained in the "RKTools V7.7" link works for Model&nbsp;204 versions 7.6 and above. For Model&nbsp;204 version 7.5, use the download labeled "RKTools V7.5."
<li>Log in, and download the version of RKTools that is compatible with your version of Model&nbsp;204. The procedure file contained in the "RKTools V7.7" link works for Model&nbsp;204 versions 7.6 and above. For Model&nbsp;204 version 7.5, use the download labeled "RKTools V7.5."
<p>
<p>
A "Click here" link in the text above the file list on the SOUL files download page brings up  [[Downloading and restoring SOUL files]], which provides help about downloading and uploading files, file sizing, and more.</p>
A "Click here" link in the text above the file list on the SOUL files download page brings up  [[Downloading and restoring SOUL files]], which provides help about downloading and uploading files, file sizing, and more.</p>
Line 26: Line 23:
</ol>
</ol>


You can bypass any step of the installation that applies only to an <var class="product">RKTools</var> module you are not installing.
You can bypass any step of the installation that applies only to an <var class="product">RKTools</var> component you are not installing.


==System requirements==
==System requirements==
<ul>
<ul>
<li>RKTools V7.7 was made specifically backward compatible to M204 version 7.6, though version 7.7 is recommended.  Version 7.5 of <var class="product">RKTools</var> requires <var class="product">Model&nbsp;204</var> version 7.5 or higher.   
<li>RKTools V7.7 was made specifically backward compatible to <var class="product">Model&nbsp;204</var> version 7.6, though version 7.7 is recommended.  Version 7.5 of <var class="product">RKTools</var> requires <var class="product">Model&nbsp;204</var> version 7.5 or higher.   
   
   
<li>Requirements for server sizes and parameter settings for each product are listed in [[#RKTools server sizes|RKTools server sizes]].</li>
<li>Requirements for [[#Server size requirements|server sizes]] for each product and Model&nbsp;204 [[#user0parms|User 0]] and [[#utableParms|UTABLE]] parameter settings are listed where appropriate in the installation steps in the next section.</li>
   
   
<li>To verify the products for which your Online is authorized, enter <code>ROCKET</code> at the <var class="product">Model&nbsp;204</var> command line.</li>
<li>To verify the products for which your Online is authorized, enter <code>ROCKET</code> at the <var class="product">Model&nbsp;204</var> command line.</li>
Line 41: Line 38:
<li>Model&nbsp;204 System Manager privileges</li>
<li>Model&nbsp;204 System Manager privileges</li>
<li>Access to the [[SUBSYSMGMT]] facility and the JCL or EXEC that runs the Online <var class="product">Model&nbsp;204</var> region.</li>
<li>Access to the [[SUBSYSMGMT]] facility and the JCL or EXEC that runs the Online <var class="product">Model&nbsp;204</var> region.</li>
</ul>
</ul></li>
</li>
</ul>
</ul>


==Installing RKTools==
==Install RKTools==
<p class="warn"><b>Attention:</b> If you are upgrading from a previous version, keep your old copies of <code>SIRLOCAL</code>, <code>M204LOCL</code>, and any application-specific data files, such as <code>JANCAT</code>, <code>SIRLIBD</code>, <code>SIRFILED</code>, or <code>SIRSTATS</code>. As of RKTools 7.7, the <code>SIRIUS</code> file is no longer used, but there is no harm in keeping it in case you want to fall back to a previous release.
<blockquote class="warn">
 
<p><b>Attention:</b> If you are upgrading from a previous version, keep your old copies of <code>SIRLOCAL</code>, <code>M204LOCL</code>, and most application-specific data files, such as <code>JANCAT</code>, <code>SIRLIBD</code>, and <code>SIRFILED</code>. The SirMon <code>SIRSTATS</code> file is replaced in version 7.7 by <code>MONDATA</code>. The <code>SIRIUS</code> file is no longer used as of RKTools 7.7, but there is no harm in keeping it in case you want to fall back to a previous RKTools version. </p>
The installation process uses your existing RKTools files to determine whether to perform upgrade actions or new-installation actions.</p>
<p>
The installation process uses your existing RKTools files to determine whether to perform upgrade actions or new-installation actions, so leave these files allocated and available, including <code>SIRLOCAL</code>.</p>
</blockquote>


<ol>
<ol>
<li>Allocate the space required for the RKTools files. </li>
<li>Allocate files.  
 
<p>The following table shows the RKTools files and their sizes: </p>
The following table shows the RKTools files and their sizes:
<table class="thJustBold">
<table class="thJustBold">
<caption>RKTools file allocations</caption>
<caption>RKTools file allocations</caption>
Line 66: Line 63:


<tr><th>M204LOCL
<tr><th>M204LOCL
</th><td>2000 pages</td>  
</th><td>3000 pages</td>  
<td>If using RKWeb.</td></tr>
<td>If using RKWeb.</td></tr>


Line 93: Line 90:
<td>Only if installing [[Janus Network Security|Janus SSL]] or RKWeb.</td></tr>
<td>Only if installing [[Janus Network Security|Janus SSL]] or RKWeb.</td></tr>
</table>
</table>
<p>
The following table shows the [[Dictionary/204 overview|Dictionary/204]] supporting files (in addition to M204PROC):</p>
<table class="thJustBold">
<tr><th>File</th><th>Size</th><th>Allocation is required...</th></tr>
<tr><th>DATALINK</th>
<td>400 pages</td>
<td>For Dictionary/204 or SQL Server.</td></tr>
<tr><th>METADATA</th>
<td>400 pages</td>
<td>For Dictionary/204 or SQL Server.</td></tr>
<tr><th>M204TEMP</th>
<td>400 pages</td>
<td>If installing Dictionary/204.</td></tr>
<tr><th>D204RPT</th>
<td>400 pages</td>
<td>If installing Dictionary/204.</td></tr>
<tr><th>D204SYS</th>
<td>400 pages</td>
<td>If installing Dictionary/204.</td></tr>
<tr><th>M204DCTL</th>
<td>400 pages</td>
<td>If installing Dictionary/204.</td></tr>
</table>
<p>
The following table shows the [[SQL Server overview|SQL Server]] supporting files (in addition to M204PROC): </p>
<table class="thJustBold" id="sqlfiles">
<caption>SQL Server file allocations</caption>
<tr><th>File</th><th>Size</th><th>Allocation is required...</th></tr>
<tr><th>CCACAT</th>
<td>700 pages</td>
<td>For RKWeb access to SQL Server. </td></tr>
<tr><th>DATALINK</th>
<td>400 pages</td>
<td>For Dictionary/204 or SQL Server.</td></tr>
<tr><th>METADATA</th>
<td>400 pages</td>
<td>For Dictionary/204 or SQL Server.</td></tr>
<tr><th>TSFDATA</th>
<td>200 pages</td>
<td>For RKWeb access to SQL Server. </td></tr>
<tr><th>TSFTEMP</th>
<td>300 pages</td>
<td>For RKWeb access to SQL Server. </td></tr>
</table>
</li>


<li><var>RESTORE</var> <code>M204PROC</code> from the downloaded DUMP file.
<li><var>RESTORE</var> <code>M204PROC</code> from the DUMP file [[#Download the installation file|downloaded from the Rocket website]].
<blockquote class="note">
<blockquote class="note">
<p><b>Note:</b> If you are restoring into your existing <code>M204PROC</code> file, note that the <code>M204PROC</code> file has X'0221' privileges, which does <b>not</b> allow <var>RESTORE</var>. You will have to <var>CREATE</var> the file first (to wipe out existing content) before you execute the <var>RESTORE</var>. A sample command sequence is: </p>
<p><b>Note:</b> If you are restoring into your existing <code>M204PROC</code> file, note that the <code>M204PROC</code> file has X'0221' privileges, which does <b>not</b> allow <var>RESTORE</var>. You will have to <var>CREATE</var> the file first (to wipe out existing content) before you execute the <var>RESTORE</var>. A sample command sequence is: </p>
Line 102: Line 155:
IN M204PROC RESTORE 192 FROM <var class="term">dumpfile</var>
IN M204PROC RESTORE 192 FROM <var class="term">dumpfile</var>
</p>
</p>
</blockquote >
</blockquote>
<p>
To verify the <code>M204PROC</code> version, you can open <code>M204PROC</code> with [[SirPro]] and view the RKTOOLS_VERSION procedure. </p>


<div id="updateJCL"></div>
<li id="updateJCL">Update the Online JCL or EXEC:
<li>Update the Online JCL or EXEC:
<ol type="a">
<ol type="a">
<li>Add DD (MVS) cards or FILEDEFs (CMS) for the RKTools files.
<li>Add DD (MVS) cards or FILEDEFs (CMS) for the RKTools files.
The "RKTools file allocations" table above lists the files for which DD cards or FILEDEFs might be needed.</li>
The "RKTools file allocations" table above lists the files for which DD cards or FILEDEFs might be needed.</li>


<li>Verify that the Online environment allows the use of file groups and application subsystems.
<li>Verify that the Online environment allows the use of [[Storing and using file group definitions (CCAGRP)#File groups|file groups]] and [[System requirements for Application Subsystems|application subsystems]].
<ul>
<ul>
<li>To use permanent file groups, the Online must have allocated an
<li>To use permanent file groups, the Online must have allocated a [[Storing and using file group definitions (CCAGRP)#Creating the CCAGRP data set|CCAGRP file]], and the <var>[[SYSOPT parameter|SYSOPT]]</var> parameter must include the <code>2</code> bit. </li>
initialized <code>CCAGRP</code> file, and the <var>[[SYSOPT parameter|SYSOPT]]</var> parameter must contain the <code>2</code> bit. </li>
 
<li>To use APSY subsystems, an Online must have allocated a [[System requirements for Application Subsystems#Overview of CCASYS|CCASYS file]], and the <var>SYSOPT</var> parameter must include the <code>1</code> bit. </li>
</ul></li>
 
<li id="Server size requirements">Review the RKTools, Dictionary/204, and Model&nbsp;204 SQL Server tables below for the minimum server-size requirements of individual subsystem components.
 
<p class="note"><b>Note:</b> The actual server size requirements might vary slightly from the listings below because of table
settings in your <var class="product">Model&nbsp;204</var> Online, and because of slight differences between <var>UTABLE</var> requirements in different versions of <var class="product">Model&nbsp;204</var>.</p>
<p>
Rocket recommends using one server size for the entire Online, making it at least 750,000 bytes to accommodate the largest RKTools component. For more information about server sizing, see [[Defining the runtime environment (CCAIN)#Sizing user server areas|Sizing user server areas]].
</p>
<p class="note"><b>Note:</b> CCATEMP usage might increase with RKTools. CCATEMP should be monitored (<code>VIEW TEMPSIZE</code>, <code>VIEW TEMPMAX</code>) to ensure that sufficient space is allocated to accommodate the additional activity.  </p>
 
<table class="thJustBold">
<caption>RKTools server sizes</caption>
<tr class="head"><th>Subsystem name</th>
<th>Minimum server size</th></tr>


<li>To use APSY subsystems, an Online must have allocated an initialized CCASYS file (with all fields defined), and the <var>SYSOPT</var> parameter must contain the <code>1</code> bit. </li>
<tr><th>JANSSL</th>
</ul>
<td>300K</td></tr>
For more information about APSY subsystems and file groups, see [[Storing and using file group definitions (CCAGRP)#File groups|File groups]] and [[System requirements for Application Subsystems]]. </li>
 
<tr><th>RKTOOLS</th>
<td>135K</td></tr>
 
<tr><th>SIRADMIN</th>
<td>150K</td></tr>
 
<tr><th>SIRDBA</th>
<td>180K</td></tr>
 
<tr><th>SIRFILE</th>
<td>230K</td></tr>
 
<tr><th>SIRLIB</th>
<td>135K</td></tr>
 
<tr><th>SIRMON</th>
<td>220K</td></tr>
 
<tr><th>SIRPRO</th>
<td>750K</td></tr>
 
<tr><th>SIRSCAN</th>
<td>250K</td></tr>
</table>
 
<table class="thJustBold">
<caption>Dictionary server sizes</caption>
<tr class="head"><th>Subsystem name
</th><th>Minimum server size
</th></tr>
 
<tr><th>DICTADMIN
</th><td>455K</td></tr>
 
<tr><th>DICTIONARY
</th><td>455K</td></tr>
 
<tr><th>DICTREPORT
</th><td>455K</td></tr>
 
<tr><th>DOCUMENT
</th><td>455K</td></tr>
 
<tr><th>FILEMGMT
</th><td>455K</td></tr>
 
<tr><th>SUBSYSMGMT
</th><td>455K</td></tr>
 
<tr><th>XREF
</th><td>455K</td></tr>
</table>
 
<table class="thJustBold">
<caption>SQL Server server sizes</caption>
<tr class="head"><th>Subsystem name</th><th>Minimum server size</th></tr>
 
<tr><th>CCACATREPT</th>
<td>250000</td></tr>
 
<tr><th>CCATSF</th>
<td>165000</td></tr>
</table>
</li>
</ol> </li>
</ol> </li>


<li>Verify that the Online has a minimum of 10 [[Sdaemons|Sdaemon]] threads allocated.  Each of these threads is typically defined as <code>IODEV15</code> thread.
<li>Verify that the Online has a minimum of 10 [[Sdaemons|Sdaemon]] threads allocated.  Each of these threads is typically defined as an <code>IODEV15</code> thread.


If using RKWeb or any of the web interfaces to other components, you may need more IODEV15s available.</li>
If using RKWeb or any of the web interfaces to other components, you may need more IODEV15s available.</li>


<li>Modify the User 0 stream.
<li id="user0parms">Modify the User 0 stream.
<p>  
<p>  
Adjust these parameters: </p>
Adjust these parameters: </p>
Line 130: Line 264:
<tr><th>Parameter</th>
<tr><th>Parameter</th>
<th>Adjustment</th></tr>
<th>Adjustment</th></tr>
<tr><th>NFILES</th>
 
<td>Increase by the number of <var class="product">RKTools</var> files.</td></tr>
<tr><th>COMPOPT</th>
<td>RKTools requires the <var>COMPOPT</var> X'03' bit, which enables mixed-case SOUL. RKTools makes extensive use of mixed-case coding, and the tools fail to compile if support is not enabled. If [[SirLib change control#Applying updates in batch mode|batch SirLib]] or other batch features are used, ensure that <var>COMPOPT</var> is set to X'03' in those jobs as well.</td></tr>
 
<tr><th>CUSTOM</th>
<td>RKWeb must include the 18 setting to enable a larger <var>[[SSLIBSIZE]]</var> on the Janus Web port, which must be secured.</td></tr><tr><th>MAXBG</th>
<td>Minimum setting is 4.</td></tr>
 
<tr><th>MAXDAEM</th>
<td>Minimum setting is 10.</td></tr>
 
<tr><th>MAXINCL</th>
<td>Minimum setting is 10.</td></tr>


<tr><th>NDCBS</th>
<tr><th>NDCBS</th>
Line 137: Line 282:


<tr><th>NDIR</th>
<tr><th>NDIR</th>
<td>Increase by the number of <var class="product">RKTools</var> files.</td></tr>
<tr><th>NFILES</th>
<td>Increase by the number of <var class="product">RKTools</var> files.</td></tr>
<td>Increase by the number of <var class="product">RKTools</var> files.</td></tr>


Line 142: Line 290:
<td>Minimum setting is 5.</td></tr>
<td>Minimum setting is 5.</td></tr>


<tr><th>MAXDAEM</th>
<tr><th>SESNPUB</th>
<td>Minimum setting is 10.</td></tr>
<td>Minimum setting is 40. The right setting for your site might be higher, based on RKWeb usage (number of users).</td></tr>
 
<tr><th>MAXINCL</th>
<td>Minimum setting is 10.</td></tr>
 
<tr><th>CUSTOM</th>
<td>RKWeb must include the 18 setting to enable a larger <var>[[SSLIBSIZE]]</var> on the Janus Web port, which must be secured.</td></tr>


<tr><th>COMPOPT</th>
<tr><th>SESUMAX</th>
<td>RKTools requires the <var>COMPOPT</var> X'03' bit, which enables mixed-case SOUL. RKTools makes extensive use of mixed-case coding, and the tools fail to compile if support is not enabled. If [[SirLib change control#Applying updates in batch mode|batch SirLib]] or other batch features are used, ensure that <var>COMPOPT</var> is set to X'03' in those jobs as well.</td></tr>
<td>Minimum setting is 10. The right setting for your site might be higher, based on RKWeb usage (number of users).</td></tr>
</table> </li>
</table> </li>
   
   
<li>Verify you have adequate <var>[[UTABLE command|UTABLE]]</var> settings.
<li id="utableParms">Verify you have adequate <var>[[UTABLE command|UTABLE]]</var> settings.
<p>
<p>
Initial problems with <var class="product">RKTools</var> subsystems are usually associated with one or two extremely small default <var>UTABLE</var> settings.
Initial problems with <var class="product">RKTools</var> subsystems are usually associated with one or two extremely small default <var>UTABLE</var> settings.
Line 166: Line 308:
<th>Description</th></tr>
<th>Description</th></tr>


<tr><th>SEQPDL</th>
<tr><th>HTLEN </th>
<td style="text-align:right">4096</td>
<td style="text-align:right">220 </td>
<td>Minimum PDL available for sequencer</td></tr>
<td>Max length of each header or trailer</td></tr>
 
<tr><th>LFTBL</th>
<td style="text-align:right">1000</td>
<td>Length of FTBL</td></tr>
 
<tr><th>LFSCB</th>
<td style="text-align:right">21400</td>
<td>Length of full screen buffer</td></tr>
 
<tr><th>LGTBL</th>
<td style="text-align:right">2000</td>
<td>Length of global variable table</td></tr>


<tr><th>LIBUFF</th>
<tr><th>LIBUFF</th>
<td style="text-align:right">2000</td>
<td style="text-align:right">2000</td>
<td>Length of input buffer</td></tr>
<td>Length of input buffer</td></tr>
<tr><th>LITBL</th>
<td style="text-align:right">104</td>
<td>Length of ITBL</td></tr>
<tr><th>LNTBL</th>
<td style="text-align:right">450</td>
<td>Length of NTBL</td></tr>


<tr><th>LOBUFF</th>
<tr><th>LOBUFF</th>
<td style="text-align:right">960</td>
<td style="text-align:right">960</td>
<td>Length of output buffer</td></tr>
<td>Length of output buffer</td></tr>
<tr><th>LOUTPB</th>
<td style="text-align:right">10000</td>
<td>Length of output page buffer</td></tr>


<tr><th>LPDLST</th>
<tr><th>LPDLST</th>
Line 185: Line 351:
<td style="text-align:right">2200</td>
<td style="text-align:right">2200</td>
<td>Length of QTBL</td></tr>
<td>Length of QTBL</td></tr>
<tr><th>LNTBL</th>
<td style="text-align:right">50</td>
<td>Length of NTBL</td></tr>


<tr><th>LSTBL</th>
<tr><th>LSTBL</th>
Line 201: Line 363:
<td style="text-align:right">1300</td>
<td style="text-align:right">1300</td>
<td>Length of VTBL</td></tr>
<td>Length of VTBL</td></tr>
<tr><th>LGTBL</th>
<td style="text-align:right">2000</td>
<td>Length of global variable table</td></tr>
<tr><th>LFTBL</th>
<td style="text-align:right">1000</td>
<td>Length of FTBL</td></tr>


<tr><th>LXTBL</th>
<tr><th>LXTBL</th>
<td style="text-align:right">1000</td>
<td style="text-align:right">1000</td>
<td>Length of XTBL</td></tr>
<td>Length of XTBL</td></tr>
<tr><th>LITBL</th>
<td style="text-align:right">104</td>
<td>Length of ITBL</td></tr>
<tr><th>LOUTPB</th>
<td style="text-align:right">10000</td>
<td>Length of output page buffer</td></tr>
<tr><th>LFSCB</th>
<td style="text-align:right">21400</td>
<td>Length of full screen buffer</td></tr>
<tr><th>NORQS</th>
<td style="text-align:right">10</td>
<td>Number of requests preserved</td></tr>
<tr><th>HTLEN </th>
<td style="text-align:right">220 </td>
<td>Max length of each header or trailer</td></tr>


<tr><th>MAXHDR</th>
<tr><th>MAXHDR</th>
Line 241: Line 375:
<td style="text-align:right">7 </td>
<td style="text-align:right">7 </td>
<td>Max number of trailers</td></tr>
<td>Max number of trailers</td></tr>
<tr><th>NORQS</th>
<td style="text-align:right">10</td>
<td>Number of requests preserved</td></tr>


<tr><th>SCRNSTBL </th>
<tr><th>SCRNSTBL </th>
Line 249: Line 387:
<p class="note"><b>Note:</b>
<p class="note"><b>Note:</b>
Either 12000 or 18000 is both a recommended minimum <em>and</em> maximum. Unless you have very large servers at your site (1 megabyte or larger), or you have very large screen objects in your own application code, a very large <var>SCRNSTBL</var> will cause table-size resets to fail.</p></td></tr>
Either 12000 or 18000 is both a recommended minimum <em>and</em> maximum. Unless you have very large servers at your site (1 megabyte or larger), or you have very large screen objects in your own application code, a very large <var>SCRNSTBL</var> will cause table-size resets to fail.</p></td></tr>
<tr><th>SEQPDL</th>
<td style="text-align:right">4096</td>
<td>Minimum PDL available for sequencer</td></tr>
</table></li>
</table></li>


<li>Install the UL/SPF components, and install or reinstall Dictionary/204 and SQL utitilies as needed:
<li>Bring up the Online and install all the RKTools components except Dictionary/204 and SQL Server; then install or reinstall Dictionary/204 and SQL utilities as needed:
<ol type="a">
<ol type="a">
<li><p><b>UL/SPF components</b></p>
<li><p><b>RKTools 7.5 components</b></p>
Issue <code>OPEN FILE M204PROC</code> (no password is required), and execute the following command:
Issue these commands:
<p class="code">INCLUDE RKTOOLS_INSTALL
<p class="code">OPEN FILE CCASYS
</p>
OPEN FILE M204PROC
INCLUDE RKTOOLS_INSTALL </p>
This procedure performs all installation functions for new users and all upgrade functions for reinstalling users.
<p>
No user profiles or other site-specific customization will be lost.
RKTOOLS_INSTALL creates or updates the dozen or so RKTools application subsystems and sets up their supporting files. It performs all installation functions for new sites and all upgrade functions for reinstalling sites. No existing user profiles or other site-specific customization will be lost, as long as your existing SIRLOCAL file is left in place. </p>
If any problems are encountered while running this procedure, correct the problems and re-execute.
<p>
The procedure produces a screen that lists all of the subsystems and whether they have loaded. It may be necessary to troubleshoot why expected subsystems did not load, then re-execute the procedure. You are encouraged to use the installation program's F1-key Help for detailed explanation of how the program is working with the subsystems. </p>
The procedure <code>RKTOOLS_INSTALL</code> also builds an APSY subsystem called <code>RKINSTALL</code>.
<p>
If installations need to be re-run, the subsystem may be invoked rather than the procedure.
During APSY subsystem execution, error messages are not suppressed, which aids in diagnosing any installation problems. For example, you will be able to see if an installation failed because a file was enqueued in a different Online, and so on. </p>
 
<p>
During APSY subsystem execution, some error messages are not suppressed, which aids in diagnosing any installation problems. For example, you will be able to see if an installation failed because a file was enqueued in a different Online, and so on. </li>
The procedure <code>RKTOOLS_INSTALL</code> also builds a subsystem called <code>RKINSTALL</code>. If the installation needs to be re-run, you can invoke the subsystem (from command line or later with option 9 in the [[RKTools#mainmenu|RKTools main menu]]) rather than the procedure. </p>
<p>
Once the installation completes successfully, start the component subsystems (<var>[[START command: Starting an application subsystem|START SUBSYSTEM]]</var> command, invoke by name, or both) before using the RKTools 3270 or RKWeb interface. </p>
<p>
To verify that the subsystems are correctly installed, enter <code>RKTOOLS</code> at the command line, and use the main menu to test the individual RKTools components. You may also want to use SUBSYSMGMT to check that the component subsystem definitions are viewable, and use [[SirPro]] to display the newly restored M204PROC file to ensure its availability. </p></li>


<li><p><b>Dictionary/204</b></p>
<li><p><b>Dictionary/204</b></p>
Because all Rocket Model&nbsp;204 procedures are in one file in V7.7, including those for [[Dictionary/204 overview|Dictionary/204]], review the [[Dictionary/204 installation guide]] to see what steps, if any, related to the Dictionary/204 tools (SUBSYSMGMT, [[FILEMGMT overview|FILEMGMT]], and so on) you might need to run in addition to the RKTools installation.</li>
Though the [[Dictionary/204 overview|Dictionary/204]] components are delivered in <code>M204PROC</code> and accessible from RKWeb as of version 7.7, they are not installed and set up by <code>RKTOOLS_INSTALL</code>. For example, on z/OS, an initial Dictionary/204 installation uses the <code>DDINST</code> JCL from the Model&nbsp;204 RKOBJLIB; for an upgrade, the <code>DDRINST</code> job.
<p>
Though the Dictionary/204 installation steps are largely included in the the RKTools installation process, you may want to review the [[Dictionary/204 installation guide]] for any additional actions you might need to take. </p></li>


<li><p><b>SQL Server</b></p>
<li><p><b>SQL Server</b></p>
Because all Rocket Model&nbsp;204 procedures are in one file in V7.7, including those for [[SQL Server overview|SQL Server utilities]], review the [[Model 204 SQL Server installation]] document to see what steps, if any, you might need to run in addition to the RKTools installation.</li>
The [[SQL Server overview|Model 204 SQL Server]] components are delivered in <code>M204PROC</code>, and the SQL Server tools (CCACATREPT, CCATSF) are accessible from RKWeb. Support for this use of RKWeb requires the availability of the [[#sqlfiles|SQL Server supporting files]].
<p>
For an initial installation of the SQL Server subsystems, open <code>M204PROC</code> and execute the following command: </p>
<p class="code">INCLUDE SQLINST </p>
<p>
For a reinstallation: </p>
<p class="code">INCLUDE SQLRINST </p>
<p>
If you are installing and using SQL Server independently apart from RKTools and RKWeb, or you have additional questions about SQL Server installation, see [[Model 204 SQL Server installation]]. </p></li>
</ol>
</ol>
</li>
</li>
   
   
<li>Use SUBSYSMGMT to add users to the appropriate [[SCLASS]] classes for any private or semi-public RKTools subsystems.  
<li>Use SUBSYSMGMT to add users to the appropriate [[SCLASS]] classes for any private or semi-public RKTools subsystems.  
<p>  
<p>
The installing user is automatically added to the administration SCLASS in all RKTools subsystems.</p> </li>
For authority to do this, you need System Administrator log in privileges, and you need SUBSYSMGMT privileges authorized via the [[Dictionary/204 administration#Security administration|DICTADMIN facility]] of Dictionary/204. The ID of the user that runs the INSTALL_RKTOOLS procedure is automatically added to the ADMIN or to the highest-level administration SCLASS in each of the RKTools subsystems (though not necessarily to the Dictionary and SQL Server subsystems).</p>  
<p>
<li>Review the next section, "RKTools server sizes," for specific requirements of individual subsystem components of <var class="product">RKTools</var>.</li>
Each component application of <var class="product">RKTools</var> has its own APSY subsystem definition and privileges associated with SCLASS specifications.
If you have a good reason for doing so, you can redefine any of the <var class="product">RKTools</var> subsystems as <var>PUBLIC</var>,
<var>SEMI-PUBLIC</var>, or <var>PRIVATE</var>.
[[Contacting Rocket Software Technical Support|Contact Rocket Software]] if you are unsure of the effect of a proposed change. </p>
<p>
RKTools components are typically installed as ''auto-start''. Use SUBSYSMGMT to disable this feature if you prefer that the subsystems not start automatically at each user request. </p>
<p>
The RKWeb interface, described further below in [[#Additional setup for RKWeb|Additional setup for RKWeb]], is controlled by the RKWEB subsystem, and you need to update the subsystem definition with the names of eligible users. Some of the RKWeb options require system administrator login privileges just as those options do when accessed with the RKTools TN3270 interface. To use these options in RKWeb requires system administrator login privileges and ADMIN SCLASS membership <i>in the RKWEB subsystem</i>, as well as a [[RKWeb#RKWeb security|suitable product license]]. </p></li>
 
<li>See the "Additional setup" sections below for the components you use at your site. </li>
</ol>
</ol>
<p class="note">
<b>Note:</b> CCATEMP usage might increase with <var class="product">RKTools</var>.
CCATEMP should be monitored (<code>VIEW TEMPSIZE</code>, <code>VIEW TEMPMAX</code>) to ensure that sufficient space is allocated to accommodate the additional activity.  </p>
===Server size requirements===
The server size requirements for RKTools, Dictionary/204, and Model 204 SQL Server are listed in this section.
<p class="note"><b>Note:</b> The actual server size requirements might vary slightly from the listings below because of table
settings in your <var class="product">Model&nbsp;204</var> Online, and because of slight differences between <var>UTABLE</var> requirements in different versions of <var class="product">Model&nbsp;204</var>.</p>


====RKTools server size====
==Additional setup==
The minimum <var class="product">RKTools</var> server size requirements are listed below.
Rocket recommends using one server size for the entire Online, making it at least 750,000 bytes to accomodate the largest RKTools component.
<table class="thJustBold">
<tr class="head"><th>Subsystem name</th>
<th>Minimum server size</th></tr>
 
<tr><th>SIRADMIN</th>
<td>150K</td></tr>
 
<tr><th>SIRDBA</th>
<td>180K</td></tr>
 
<tr><th>SIRFILE</th>
<td>230K</td></tr>
 
<tr><th>SIRLIB</th>
<td>135K</td></tr>
 
<tr><th>SIRMON</th>
<td>220K</td></tr>
 
<tr><th>SIRPRO</th>
<td>750K</td></tr>
 
<tr><th>SIRSCAN</th>
<td>250K</td></tr>
 
<tr><th>JANSSL</th>
<td>300K</td></tr>
 
<tr><th>RKTools</th>
<td>135K</td></tr>
</table>
 
====Dictionary/204 server size====
The minimum <var class="product">Dictionary/204</var> server size requirements are listed below.
 
<table class="thJustBold">
<tr class="head"><th>Subsystem name
</th><th>Minimum server size
</th></tr>
 
<tr><th>DICTIONARY
</th><td>455K</td></tr>
 
<tr><th>DOCUMENT
</th><td>455K</td></tr>
 
<tr><th>DICTADMIN
</th><td>455K</td></tr>
 
<tr><th>FILEMGMT
</th><td>455K</td></tr>
 
<tr><th>SUBSYSMGMT
</th><td>455K</td></tr>
 
<tr><th>DICTREPORT
</th><td>455K</td></tr>
 
<tr><th>XREF
</th><td>455K</td></tr>
</table>
 
====SQL Server size====
The minimum Model 204 SQL Server size requirements are listed below.
 
<table class="thJustBold">
<tr class="head"><th>Subsystem name</th><th>Minimum server size</th></tr>
 
<tr><th>CCACATREPT</th>
<td>250000</td></tr>
 
<tr><th>CCATSF</th>
<td>165000</td></tr>
</table>


===Additional setup for SirLib===
===Additional setup for SirLib===
Line 372: Line 453:


===Additional setup for SirScan===
===Additional setup for SirScan===
The <var class="product">SirScan</var> administrator can use SIRADMIN to set default I/O and record maximums for users in the various <var class="product">SirScan</var> SCLASSes. See [[SirScan setup]] for details.
The <var class="product">SirScan</var> administrator can use SIRADMIN to set default I/O and record maximums for users in the various <var class="product">SirScan</var> SCLASSes. See [[SirScan setup#Updating the SirScan SCLASS maximums in SIRADMIN|SirScan setup]] for details.


===Additional setup for SirMon===
===Additional setup for SirMon===
Line 380: Line 461:
Only users in the ADMIN SCLASS are able to add custom screen definitions to <var class="product">SirMon</var>.
Only users in the ADMIN SCLASS are able to add custom screen definitions to <var class="product">SirMon</var>.
   
   
If the <var class="product">SirMon</var> background monitor is to be used,
If the <var class="product">SirMon</var> [[SirMon background monitor|background monitor]] is to be used, add the following line to the User 0 input stream:
add the following line to User 0's input stream:
<p class="code">SIRMON BACKGROUND
<p class="code">SIRMON BACKGROUND
</p>
</p>
The background monitor may also be started automatically in a BATCH2 thread or an sdaemon thread.
The background monitor may also be started automatically in a BATCH2 thread or an sdaemon thread.
Consult the <var class="product">[[SirMon]]</var> documentation for details.
   
   
You can customize statistic thresholds or use the supplied defaults to establish problem conditions.
You can customize statistic thresholds or use the supplied defaults to establish problem conditions.
   
   
<var class="product">SirMon</var> has a feature to send warnings to
The background monitor also lets you send warnings to
e-mail addresses and cell phones (via e-mail).
e-mail addresses and cell phones (via e-mail).
This feature requires <var class="product">[[Janus Sockets]]</var> and a started <var class="product">Janus Sockets</var> port.
This feature requires <var class="product">[[Janus Sockets]]</var> and a started <var class="product">Janus Sockets</var> port.
Line 402: Line 481:
supplied defaults to establish problem conditions.
supplied defaults to establish problem conditions.


===RKTools access privileges and SCLASSes===
===Additional setup for RKWeb===
Each component application of <var class="product">RKTools</var> has its own APSY subsystem definition and privileges associated with [[SCLASS]] specifications.
New for RKTools version 7.7 (and requiring at least Model&nbsp;204 version 7.6), [[RKWeb]] (Model 204 Tools on the Web) provides web access for all the important elements of Model&nbsp;204. Use of this product requires <var class="product">[[Janus Web Server]]</var>. If your site does not own Janus Web Server, RKWeb can still be used by a limited number of Janus Web threads under the Janus TOGA agreement, which allows the running of as many as five web threads.
If you have a good reason for doing so, you can redefine any of the <var class="product">RKTools</var> subsystems as <var>PUBLIC</var>,
<p>
<var>SEMI-PUBLIC</var>, or <var>PRIVATE</var>.
Because RKWeb includes an interface for password maintenance and other protected Model&nbsp;204 entities, <i>it is mandatory to run it on an SSL-protected web port</i>. Experienced users of Janus Web will probably have Janus ports already defined and protected by SSL certificates. Users new to Janus Web might want to review [[#Defining a Janus port and generating a self-signed SSL certificate|Defining a Janus port and generating a self-signed SSL certificate]], below, on defining an unprotected port that can be used to generate an initial self-signed certificate. </p>
[[Contacting Rocket Software Technical Support|Contact Rocket Software]] if you are unsure of the effect of a proposed change.


RKTools components are installed as ''auto-start''. Use SUBSYSMGMT to disable this feature if you prefer that the subsystems not start automatically at each user request.
====Browser support and configuration====
 
==RKWeb (Model 204 Tools on the Web)==
New for RKTools version 7.7 (and requiring at least Model&nbsp;204 version 7.6), [[RKWeb]] provides web access for all the important elements of Model&nbsp;204. Use of this product requires <var class="product">[[Janus Web Server]]</var>. If your site does not own Janus Web Server, RKWeb can still be used by a limited number of Janus Web threads under the Janus TOGA agreement, which allows the running of as many as four web threads.
 
Because RKWeb includes an interface for password maintenance and other protected Model&nbsp;204 entities, it is mandatory to run it on an SSL-protected web port. Experienced users of Janus Web will probably have Janus ports already defined and protected by SSL certificates. Users new to Janus Web might want to review the bottom section, below, on defining an unprotected port that can be used to generate an initial self-signed certificate.
 
===Browser support and configuration===
RKWeb supports Edge, Chrome, and the latest versions of Firefox and Safari. IE (Internet Explorer) is explicitly <i>not</i> supported as it is deprecated by Microsoft.
RKWeb supports Edge, Chrome, and the latest versions of Firefox and Safari. IE (Internet Explorer) is explicitly <i>not</i> supported as it is deprecated by Microsoft.


Line 422: Line 493:
RKWeb makes extensive use of Javascript, which must be enabled for your browser.
RKWeb makes extensive use of Javascript, which must be enabled for your browser.


===Janus Web port definition===
====Janus Web port definition====
Authorized Janus Web Server users will find that RKWeb works best with at least ten Janus Web threads available on the port definition. Non-Janus customers can still use RKWeb via the free [[Janus Web Server#Limited Janus Web Server|Limited Janus Web Server]] feature, which allows a Janus Web port to be defined with as many as five threads. Under this configuration, RKWeb might operate a little slowly and might require occasional forced-refreshes, but all features are otherwise allowed.
Authorized Janus Web Server users will find that RKWeb works best with at least ten Janus Web threads available on the port definition. Non-Janus customers can still use RKWeb via the free [[Janus Web Server#Limited Janus Web Server|Limited Janus Web Server]] feature, which allows a Janus Web port to be defined with as many as five threads. Under this configuration, RKWeb might operate a little slowly and might require occasional forced-refreshes, but all features are otherwise allowed.


Line 436: Line 507:
</p>
</p>


RKWeb provides an interface (<code>Manage > SSL Certificates</code>) for running the [[Janus Network Security]] application (JANSSL) for obtaining and managing SSL certificates. The RKWeb version of this application mimics the  
Such an SSL port as defined above will not start unless you have already obtained a signed certificate. To do so, you can start with an unsecured port and use the JANSSL application to [[#Defining a Janus port and generating a self-signed SSL certificate|generate a self-signed SSL certificate]].
 
RKWeb also provides an interface (<code>Manage > SSL Certificates</code>) for running the [[Janus Network Security]] application (JANSSL) for obtaining and managing SSL certificates. The RKWeb version of this application mimics the  
operation of the application that is described in detail in the Janus Network Security wiki pages.
operation of the application that is described in detail in the Janus Network Security wiki pages.


===Janus Web rules for RKWeb===
====Janus Web rules for RKWeb====
Following are the recommended and mandatory [[JANUS WEB rule matching order and examples|Janus rules]] to run RKWeb:
Following are the recommended and mandatory [[JANUS WEB rule matching order and examples|Janus rules]] to run RKWeb:


Line 453: Line 526:
JANUS WEB <i>portname</i> TYPE ANY *.HTM TEXT/HTML
JANUS WEB <i>portname</i> TYPE ANY *.HTM TEXT/HTML
JANUS WEB <i>portname</i> TYPE ANY *.GIF IMAGE/GIF
JANUS WEB <i>portname</i> TYPE ANY *.GIF IMAGE/GIF
JANUS WEB <i>portname</i> TYPE ANY *.PNG IMAGE/GIF
JANUS WEB <i>portname</i> TYPE ANY *.PNG IMAGE/PNG
JANUS WEB <i>portname</i> TYPE ANY *.CSS TEXT/CSS
JANUS WEB <i>portname</i> TYPE ANY *.CSS TEXT/CSS
JANUS WEB <i>portname</i> TYPE ANY *.JS TEXT/JAVASCRIPT
JANUS WEB <i>portname</i> TYPE ANY *.JS TEXT/JAVASCRIPT
Line 473: Line 546:
JANUS WEB <i>portname</i> ON /ACE/SRC/MODE-M204.JS  OPEN M204PROC SEND MODE-M204.JS TEXT
JANUS WEB <i>portname</i> ON /ACE/SRC/MODE-M204.JS  OPEN M204PROC SEND MODE-M204.JS TEXT
JANUS WEB <i>portname</i> ON /ACE/LIB/*.JS          OPEN M204PROC SEND *.JS BINARY EXPIRE +999999
JANUS WEB <i>portname</i> ON /ACE/LIB/*.JS          OPEN M204PROC SEND *.JS BINARY EXPIRE +999999
<b></b>*... RKWeb rules:
<b></b>*... RKWeb rules:
JANUS WEB <i>portname</i> ON /RKWEB/* CMD RKWEB
JANUS WEB <i>portname</i> ON /RKWEB/* CMD RKWEB
Line 491: Line 565:


<b></b>*... Rules supporting the applications implemented as Janus Legacy apps.
<b></b>*... Rules supporting the applications implemented as Janus Legacy apps.
JANUS WEB <i>portname</i>  DISALLOW /ACE*
JANUS WEB <i>portname</i>  DISALLOW /RKW*
JANUS WEB <i>portname</i>  DISALLOW /SIRLIB*
JANUS WEB <i>portname</i>  DISALLOW /SIRLIB*
JANUS WEB <i>portname</i>  DISALLOW /DICTADMIN*  
JANUS WEB <i>portname</i>  DISALLOW /DICTADMIN*  
Line 500: Line 576:
JANUS WEB <i>portname</i>  DISALLOW /CCATSF*
JANUS WEB <i>portname</i>  DISALLOW /CCATSF*


JANUS WEB <i>portname</i>  ALLOW    /ACE*        USER *
JANUS WEB <i>portname</i>  ALLOW    /RKW*        USER *
JANUS WEB <i>portname</i>  ALLOW    /SIRLIB*    USER *
JANUS WEB <i>portname</i>  ALLOW    /SIRLIB*    USER *
JANUS WEB <i>portname</i>  ALLOW    /DICTADMIN*  USER *
JANUS WEB <i>portname</i>  ALLOW    /DICTADMIN*  USER *
Line 506: Line 584:
JANUS WEB <i>portname</i>  ALLOW    /XREF*      USER *
JANUS WEB <i>portname</i>  ALLOW    /XREF*      USER *
JANUS WEB <i>portname</i>  ALLOW    /FILEMGMT*  USER *
JANUS WEB <i>portname</i>  ALLOW    /FILEMGMT*  USER *
JANUS WEB <i>portname</i>  ALLOW    /CCACATREPT*   USER *
JANUS WEB <i>portname</i>  ALLOW    /CCACATREPT* USER *
JANUS WEB <i>portname</i>  ALLOW    /CCATSF*   USER *
JANUS WEB <i>portname</i>  ALLOW    /CCATSF*     USER *


JANUS WEB <i>portname</i>  ON /SIRLIB*    CMD 'SIRLIB *'
JANUS WEB <i>portname</i>  ON /SIRLIB*    CMD 'SIRLIB *'
Line 567: Line 645:
</p>
</p>


Again, because the above rules force users to log in with their enterprise credentials, and because RKWeb provides an interface into protected elements like passwords and APSY definitions, the port on which <var class="product">RKWeb</var> runs must be SSL protected.
Again, as described earlier in [[#Janus Web port definition|Janus Web port definition]], because the above rules force users to log in with their enterprise credentials, and because RKWeb provides an interface into protected elements like passwords and APSY definitions, the port on which <var class="product">RKWeb</var> runs must be SSL protected.
 
To verify that the Janus Web rules are defined and that the SSL and unsecured ports are started, issue a <code>[[JANUS STATUS|JANUS STATUS *]]</code> command.


Once the rules are implemented and the port is started, RKWeb can be reached with a URL like this:
Once the rules are implemented and the port is started, You can access RKWeb with a URL like this:


<p class="code"><nowiki>https://www.mydomain.com/rkweb/welcome.html
<p class="code"><nowiki>https://www.mydomain.com/rkweb/welcome.html
</nowiki></p>
</nowiki></p>


In addition to web rules, if low-privileged users are to be given access to RKWeb, a couple system level methods need to be made available to those users. The following commands are required to implement this:
In addition to web rules, if low-privileged users are to be given access to RKWeb, certain system level methods need to be made available to those users. The following commands are required to implement this:


<p class="code">SIRMETH ALLOW SYSTEMSET SUBSYSTEM RKW* NONPRE
<p class="code">SIRMETH ALLOW SYSTEMSET SUBSYSTEM RKW* NONPRE
Line 583: Line 663:
As implied by the recommended and mandatory <var>JANUS WEB</var> rules above, some RKWeb applications are implemented with [[Janus Web Legacy Support|Janus Legacy]], which launches them into a separate browser tab. These Janus Legacy applications are not fully integrated with RKWeb, so you must use the security configured for those applications. For instance, [[Dictionary/204 FILEMGMT overview#Prerequisites|FILEMGMT]] is implemented as Janus Legacy, and it might prompt the user for a separate password.
As implied by the recommended and mandatory <var>JANUS WEB</var> rules above, some RKWeb applications are implemented with [[Janus Web Legacy Support|Janus Legacy]], which launches them into a separate browser tab. These Janus Legacy applications are not fully integrated with RKWeb, so you must use the security configured for those applications. For instance, [[Dictionary/204 FILEMGMT overview#Prerequisites|FILEMGMT]] is implemented as Janus Legacy, and it might prompt the user for a separate password.


===Defining a Janus port and Generating a self-signed SSL Certificate===
===Additional setup for JANSSL===
RKWeb can be run on any Janus port, and experienced users will most likely add the above Janus rules to ports they already have. New users might need to define an initial <em>unprotected</em> Janus port that they can use to generate a self-signed certificate. That certificate can then be used to protect the port on which RKWeb will be run.
 
====Defining a Janus port and generating a self-signed SSL certificate====
You can run RKWeb on any SSL-protected Janus port, and experienced users are likely to add the [[#Janus Web rules for RKWeb|recommended Janus rules]] to a port or ports they already have configured.  


Here are some rules to create a very basic Janus Web port:
New users might need to define an initial <em>unprotected</em> Janus port that can then be used to generate a self-signed certificate. That certificate is then used to protect the port on which RKWeb is to run. Directions follow:
<p class="code">
<ol>
JANUS DEFINE MYWEBPORT 80 WEBSERV 10 IBSIZE 4096 OBSIZE 8192 TRACE 1 RBSIZE 4096 -
<li>Enter these rules to create a very basic Janus Web port:
    UPCASE WEBUSER WEBUSER WEBACCT WEBUSER MAXTEMP 1000
<p class="code">JANUS DEFINE MYWEBPORT 80 WEBSERV 10 IBSIZE 4096 OBSIZE 8192 TRACE 1 RBSIZE 4096 -
    UPCASE WEBUSER WEBUSER WEBACCT WEBUSER MAXTEMP 1000


  JANUS WEB MYWEBPORTON / OPEN FILE M204PROC CMD 'INCLUDE JANWEB.HOMEPAGE.HTML'
  JANUS WEB MYWEBPORT ON / OPEN FILE M204PROC CMD 'INCLUDE JANWEB.HOMEPAGE.HTML'
  JANUS WEB MYWEBPORT ON /JANSSL/* OPEN FILE M204PROC CMD 'INCLUDE JANSSL.*'     
  JANUS WEB MYWEBPORT ON /JANSSL/* OPEN FILE M204PROC CMD 'INCLUDE JANSSL.*'     
  JANUS WEB MYWEBPORT ON /JANWEB/* OPEN FILE M204PROC CMD 'INCLUDE JANWEB.*'  
  JANUS WEB MYWEBPORT ON /JANWEB/* OPEN FILE M204PROC CMD 'INCLUDE JANWEB.*'  


  JANUS START MYWEBPORT
* ALLOW rules that will force a logon for the JANSSL application.
</p>
* These will result in a warning, which is expected, but can be ignored.
JANUS WEB MYWEBPORT DISALLOW *
JANUS WEB MYWEBPORT ALLOW * USER * 
 
  JANUS START MYWEBPORT </p></li>
 
<li>Use either of the following ways to connect to the JANSSL certificate management program:
<ul>
<li>With the following URL, invoke the Janus default home page:
<p class="code"><nowiki>http://</nowiki>www.<i>mydomain</i>.com:<i>xxxx</i> </p>
<p>
where <var class="term">xxxx</var> is the port number. In the preceding port definition, <code>80</code> is the default port for web connections. Your network administrator might require a different port number. </p>
<p>
On the Janus default home page, click the link to the JANSSL certificate management program. </p></li>
 
<li>Using your own domain name and port number, connect directly to the JANSSL certificate management program:
 
<p class="code"><nowiki>http://</nowiki>www.<i>mydomain</i>.com:9999/janweb/sslmain.html </p></li>
</ul></li>
 
<li>Use the certificate management program to generate a self-signed certificate.
<p>
The program contains ample online Help. Follow the instructions for generating a self-signed certificate. </p></li>
 
<li>Use the self-signed certificate to protect the port from which RKWeb will run. </li>
</ol>


In the above port definition, "80" is the default port for web connections. Your network administrator might tell you to use a different port number, but once you have that sorted out, you simply point your browser toward http://www.yourdomain.com:xxxx, where xxxx is the port number. The default home page will appear with a link to the JANSSL Certificate management program. You use this to generate a self-signed certificate, and then use that certificate to protect the port from which RKWeb will run.
[[Category: RKTools]]

Latest revision as of 17:03, 9 October 2017

Overview

RKTools (Rocket Tools for Model 204) is a set of application subsystems (aka APSYs) running inside a Model 204 Online that provide TN3270 and web-based tools for programmers, database administrators, and system managers.

As of RKTools V7.7, all Rocket-provided, SOUL-based tools are consolidated in the M204PROC procedure file. M204PROC includes all components from RKTools 7.5 in addition to Dictionary/204 and the SQL Server utilities. This means that all Model 204 SOUL tools provided by Rocket are in a single file.

Note: Since the RKTools 7.7 installation process modifies the application subsystem definitions to point to the M204PROC file, sites that are upgrading must perform a full installation and not merely an M204PROC file overlay. To allow for a switch back to RKTools 7.5, keep a backup of your current SIRIUS file and your current CCASYS file (though you can also change the subsystem definitions manually using SUBSYSMGMT).

Installing RKTools requires downloading the M204PROC file from the Model 204 maintenance website, restoring it to your environment, setting up some subsidiary Model 204 files, and verifying that the Online environment has the appropriate parameter settings. Then you run a single procedure that installs or upgrades the RKTools subsystems.

Once the installation is complete, upgrades to RKTools can almost always be handled by restoring a fresh copy of the M204PROC file.

Download the installation file

All RKTools 7.7 code resides in the M204PROC Model 204 file. You need to download a dump version of this file from the Rocket Software Model 204 maintenance website. The procedure file for RKTools 7.5 is SIRIUS.

To download from the Rocket website:

  1. On the "Rocket M204 Customer Care" page (http://m204.rocketsoftware.com), go to the "Downloads and Uploads" section and select the "Download SOUL files" link to access the "SOUL files for Rocket Software" page.
  2. Log in, and download the version of RKTools that is compatible with your version of Model 204. The procedure file contained in the "RKTools V7.7" link works for Model 204 versions 7.6 and above. For Model 204 version 7.5, use the download labeled "RKTools V7.5."

    A "Click here" link in the text above the file list on the SOUL files download page brings up Downloading and restoring SOUL files, which provides help about downloading and uploading files, file sizing, and more.

You can bypass any step of the installation that applies only to an RKTools component you are not installing.

System requirements

  • RKTools V7.7 was made specifically backward compatible to Model 204 version 7.6, though version 7.7 is recommended. Version 7.5 of RKTools requires Model 204 version 7.5 or higher.
  • Requirements for server sizes for each product and Model 204 User 0 and UTABLE parameter settings are listed where appropriate in the installation steps in the next section.
  • To verify the products for which your Online is authorized, enter ROCKET at the Model 204 command line.
  • The installing user must have:
    • Update access to the JCL or EXECs that bring up the host Online
    • Model 204 System Manager privileges
    • Access to the SUBSYSMGMT facility and the JCL or EXEC that runs the Online Model 204 region.

Install RKTools

Attention: If you are upgrading from a previous version, keep your old copies of SIRLOCAL, M204LOCL, and most application-specific data files, such as JANCAT, SIRLIBD, and SIRFILED. The SirMon SIRSTATS file is replaced in version 7.7 by MONDATA. The SIRIUS file is no longer used as of RKTools 7.7, but there is no harm in keeping it in case you want to fall back to a previous RKTools version.

The installation process uses your existing RKTools files to determine whether to perform upgrade actions or new-installation actions, so leave these files allocated and available, including SIRLOCAL.

  1. Allocate files.

    The following table shows the RKTools files and their sizes:

    RKTools file allocations
    FileSizeAllocation is required...
    M204PROC 9800 pages Always.
    SIRLOCAL 1200 pages Always.
    M204LOCL 3000 pages If using RKWeb.
    MONDATA 4000 pages Only if installing SirMon.

    Note: MONDATA replaces SIRSTATS, which is no longer needed as of RKTools V7.7.

    SIRFILED 1200 pages Only if installing SirFile.
    SIRLIBD 1200 pages Only if installing SirLib.
    SIRLIBP 1200 pages Only if installing SirLib.
    JANCAT 1200 pages Only if installing Janus OMNI.
    JANSSL 1200 pages Only if installing Janus SSL or RKWeb.

    The following table shows the Dictionary/204 supporting files (in addition to M204PROC):

    FileSizeAllocation is required...
    DATALINK 400 pages For Dictionary/204 or SQL Server.
    METADATA 400 pages For Dictionary/204 or SQL Server.
    M204TEMP 400 pages If installing Dictionary/204.
    D204RPT 400 pages If installing Dictionary/204.
    D204SYS 400 pages If installing Dictionary/204.
    M204DCTL 400 pages If installing Dictionary/204.

    The following table shows the SQL Server supporting files (in addition to M204PROC):

    SQL Server file allocations
    FileSizeAllocation is required...
    CCACAT 700 pages For RKWeb access to SQL Server.
    DATALINK 400 pages For Dictionary/204 or SQL Server.
    METADATA 400 pages For Dictionary/204 or SQL Server.
    TSFDATA 200 pages For RKWeb access to SQL Server.
    TSFTEMP 300 pages For RKWeb access to SQL Server.
  2. RESTORE M204PROC from the DUMP file downloaded from the Rocket website.

    Note: If you are restoring into your existing M204PROC file, note that the M204PROC file has X'0221' privileges, which does not allow RESTORE. You will have to CREATE the file first (to wipe out existing content) before you execute the RESTORE. A sample command sequence is:

    CREATE FILE M204PROC END CREATE OPEN FILE M204PROC IN M204PROC RESTORE 192 FROM dumpfile

    To verify the M204PROC version, you can open M204PROC with SirPro and view the RKTOOLS_VERSION procedure.

  3. Update the Online JCL or EXEC:
    1. Add DD (MVS) cards or FILEDEFs (CMS) for the RKTools files. The "RKTools file allocations" table above lists the files for which DD cards or FILEDEFs might be needed.
    2. Verify that the Online environment allows the use of file groups and application subsystems.
      • To use permanent file groups, the Online must have allocated a CCAGRP file, and the SYSOPT parameter must include the 2 bit.
      • To use APSY subsystems, an Online must have allocated a CCASYS file, and the SYSOPT parameter must include the 1 bit.
    3. Review the RKTools, Dictionary/204, and Model 204 SQL Server tables below for the minimum server-size requirements of individual subsystem components.

      Note: The actual server size requirements might vary slightly from the listings below because of table settings in your Model 204 Online, and because of slight differences between UTABLE requirements in different versions of Model 204.

      Rocket recommends using one server size for the entire Online, making it at least 750,000 bytes to accommodate the largest RKTools component. For more information about server sizing, see Sizing user server areas.

      Note: CCATEMP usage might increase with RKTools. CCATEMP should be monitored (VIEW TEMPSIZE, VIEW TEMPMAX) to ensure that sufficient space is allocated to accommodate the additional activity.

      RKTools server sizes
      Subsystem name Minimum server size
      JANSSL 300K
      RKTOOLS 135K
      SIRADMIN 150K
      SIRDBA 180K
      SIRFILE 230K
      SIRLIB 135K
      SIRMON 220K
      SIRPRO 750K
      SIRSCAN 250K
      Dictionary server sizes
      Subsystem name Minimum server size
      DICTADMIN 455K
      DICTIONARY 455K
      DICTREPORT 455K
      DOCUMENT 455K
      FILEMGMT 455K
      SUBSYSMGMT 455K
      XREF 455K
      SQL Server server sizes
      Subsystem nameMinimum server size
      CCACATREPT 250000
      CCATSF 165000
  4. Verify that the Online has a minimum of 10 Sdaemon threads allocated. Each of these threads is typically defined as an IODEV15 thread. If using RKWeb or any of the web interfaces to other components, you may need more IODEV15s available.
  5. Modify the User 0 stream.

    Adjust these parameters:

    Parameter Adjustment
    COMPOPT RKTools requires the COMPOPT X'03' bit, which enables mixed-case SOUL. RKTools makes extensive use of mixed-case coding, and the tools fail to compile if support is not enabled. If batch SirLib or other batch features are used, ensure that COMPOPT is set to X'03' in those jobs as well.
    CUSTOM RKWeb must include the 18 setting to enable a larger SSLIBSIZE on the Janus Web port, which must be secured.
    MAXBG Minimum setting is 4.
    MAXDAEM Minimum setting is 10.
    MAXINCL Minimum setting is 10.
    NDCBS Increase by the number of RKTools files.
    NDIR Increase by the number of RKTools files.
    NFILES Increase by the number of RKTools files.
    NORQS Minimum setting is 5.
    SESNPUB Minimum setting is 40. The right setting for your site might be higher, based on RKWeb usage (number of users).
    SESUMAX Minimum setting is 10. The right setting for your site might be higher, based on RKWeb usage (number of users).
  6. Verify you have adequate UTABLE settings.

    Initial problems with RKTools subsystems are usually associated with one or two extremely small default UTABLE settings. Running the failing subsystem in TEST DEBUG mode will highlight UTABLE parameters that need to be increased.

    These are the recommended settings:

    UTABLE parameter Value Description
    HTLEN 220 Max length of each header or trailer
    LFTBL 1000 Length of FTBL
    LFSCB 21400 Length of full screen buffer
    LGTBL 2000 Length of global variable table
    LIBUFF 2000 Length of input buffer
    LITBL 104 Length of ITBL
    LNTBL 450 Length of NTBL
    LOBUFF 960 Length of output buffer
    LOUTPB 10000 Length of output page buffer
    LPDLST 10000 Length of user push down list
    LQTBL 2200 Length of QTBL
    LSTBL 60000 Length of STBL
    LTTBL 2000 Length of TTBL
    LVTBL 1300 Length of VTBL
    LXTBL 1000 Length of XTBL
    MAXHDR 7 Max number of headers
    MAXTRL 7 Max number of trailers
    NORQS 10 Number of requests preserved
    SCRNSTBL 12000 STBL size for screen objects; this must be set for SIRMON, SIRPRO, and SIRSCAN.

    A setting of 18000 is recommended for shops that use Mod 6 terminals with very large screen sizes (Rocket regularly tests with 3270 screen sizes of 50x150 characters).

    Note: Either 12000 or 18000 is both a recommended minimum and maximum. Unless you have very large servers at your site (1 megabyte or larger), or you have very large screen objects in your own application code, a very large SCRNSTBL will cause table-size resets to fail.

    SEQPDL 4096 Minimum PDL available for sequencer
  7. Bring up the Online and install all the RKTools components except Dictionary/204 and SQL Server; then install or reinstall Dictionary/204 and SQL utilities as needed:

    1. RKTools 7.5 components

      Issue these commands:

      OPEN FILE CCASYS OPEN FILE M204PROC INCLUDE RKTOOLS_INSTALL

      RKTOOLS_INSTALL creates or updates the dozen or so RKTools application subsystems and sets up their supporting files. It performs all installation functions for new sites and all upgrade functions for reinstalling sites. No existing user profiles or other site-specific customization will be lost, as long as your existing SIRLOCAL file is left in place.

      The procedure produces a screen that lists all of the subsystems and whether they have loaded. It may be necessary to troubleshoot why expected subsystems did not load, then re-execute the procedure. You are encouraged to use the installation program's F1-key Help for detailed explanation of how the program is working with the subsystems.

      During APSY subsystem execution, error messages are not suppressed, which aids in diagnosing any installation problems. For example, you will be able to see if an installation failed because a file was enqueued in a different Online, and so on.

      The procedure RKTOOLS_INSTALL also builds a subsystem called RKINSTALL. If the installation needs to be re-run, you can invoke the subsystem (from command line or later with option 9 in the RKTools main menu) rather than the procedure.

      Once the installation completes successfully, start the component subsystems (START SUBSYSTEM command, invoke by name, or both) before using the RKTools 3270 or RKWeb interface.

      To verify that the subsystems are correctly installed, enter RKTOOLS at the command line, and use the main menu to test the individual RKTools components. You may also want to use SUBSYSMGMT to check that the component subsystem definitions are viewable, and use SirPro to display the newly restored M204PROC file to ensure its availability.

    2. Dictionary/204

      Though the Dictionary/204 components are delivered in M204PROC and accessible from RKWeb as of version 7.7, they are not installed and set up by RKTOOLS_INSTALL. For example, on z/OS, an initial Dictionary/204 installation uses the DDINST JCL from the Model 204 RKOBJLIB; for an upgrade, the DDRINST job.

      Though the Dictionary/204 installation steps are largely included in the the RKTools installation process, you may want to review the Dictionary/204 installation guide for any additional actions you might need to take.

    3. SQL Server

      The Model 204 SQL Server components are delivered in M204PROC, and the SQL Server tools (CCACATREPT, CCATSF) are accessible from RKWeb. Support for this use of RKWeb requires the availability of the SQL Server supporting files.

      For an initial installation of the SQL Server subsystems, open M204PROC and execute the following command:

      INCLUDE SQLINST

      For a reinstallation:

      INCLUDE SQLRINST

      If you are installing and using SQL Server independently apart from RKTools and RKWeb, or you have additional questions about SQL Server installation, see Model 204 SQL Server installation.

  8. Use SUBSYSMGMT to add users to the appropriate SCLASS classes for any private or semi-public RKTools subsystems.

    For authority to do this, you need System Administrator log in privileges, and you need SUBSYSMGMT privileges authorized via the DICTADMIN facility of Dictionary/204. The ID of the user that runs the INSTALL_RKTOOLS procedure is automatically added to the ADMIN or to the highest-level administration SCLASS in each of the RKTools subsystems (though not necessarily to the Dictionary and SQL Server subsystems).

    Each component application of RKTools has its own APSY subsystem definition and privileges associated with SCLASS specifications. If you have a good reason for doing so, you can redefine any of the RKTools subsystems as PUBLIC, SEMI-PUBLIC, or PRIVATE. Contact Rocket Software if you are unsure of the effect of a proposed change.

    RKTools components are typically installed as auto-start. Use SUBSYSMGMT to disable this feature if you prefer that the subsystems not start automatically at each user request.

    The RKWeb interface, described further below in Additional setup for RKWeb, is controlled by the RKWEB subsystem, and you need to update the subsystem definition with the names of eligible users. Some of the RKWeb options require system administrator login privileges just as those options do when accessed with the RKTools TN3270 interface. To use these options in RKWeb requires system administrator login privileges and ADMIN SCLASS membership in the RKWEB subsystem, as well as a suitable product license.

  9. See the "Additional setup" sections below for the components you use at your site.

Additional setup

Additional setup for SirLib

Read and follow the instructions in the SirLib "getting started" steps.

Additional setup for SirScan

The SirScan administrator can use SIRADMIN to set default I/O and record maximums for users in the various SirScan SCLASSes. See SirScan setup for details.

Additional setup for SirMon

When users are added to SCLASSes, note that there is a special BUMP SCLASS. Any user added to this SCLASS gains the ability to BUMP other users. This class does not provide access to customizing options in SirMon. Only users in the ADMIN SCLASS are able to add custom screen definitions to SirMon.

If the SirMon background monitor is to be used, add the following line to the User 0 input stream:

SIRMON BACKGROUND

The background monitor may also be started automatically in a BATCH2 thread or an sdaemon thread.

You can customize statistic thresholds or use the supplied defaults to establish problem conditions.

The background monitor also lets you send warnings to e-mail addresses and cell phones (via e-mail). This feature requires Janus Sockets and a started Janus Sockets port.

Additional setup for SirFile

If the SirFile background monitor is to be used, add the following line to User 0's input stream:

SIRFILE BACKGROUND

As with SirMon, the background monitor may be started automatically in a BATCH2 thread or in an sdaemon thread. See SirFile refresh process for details.

You can customize the system and file-specific thresholds or use the supplied defaults to establish problem conditions.

Additional setup for RKWeb

New for RKTools version 7.7 (and requiring at least Model 204 version 7.6), RKWeb (Model 204 Tools on the Web) provides web access for all the important elements of Model 204. Use of this product requires Janus Web Server. If your site does not own Janus Web Server, RKWeb can still be used by a limited number of Janus Web threads under the Janus TOGA agreement, which allows the running of as many as five web threads.

Because RKWeb includes an interface for password maintenance and other protected Model 204 entities, it is mandatory to run it on an SSL-protected web port. Experienced users of Janus Web will probably have Janus ports already defined and protected by SSL certificates. Users new to Janus Web might want to review Defining a Janus port and generating a self-signed SSL certificate, below, on defining an unprotected port that can be used to generate an initial self-signed certificate.

Browser support and configuration

RKWeb supports Edge, Chrome, and the latest versions of Firefox and Safari. IE (Internet Explorer) is explicitly not supported as it is deprecated by Microsoft.

On some browsers, it might be necessary to allow pop-ups or to whitelist your RKWeb port so that pop-ups are authorized.

RKWeb makes extensive use of Javascript, which must be enabled for your browser.

Janus Web port definition

Authorized Janus Web Server users will find that RKWeb works best with at least ten Janus Web threads available on the port definition. Non-Janus customers can still use RKWeb via the free Limited Janus Web Server feature, which allows a Janus Web port to be defined with as many as five threads. Under this configuration, RKWeb might operate a little slowly and might require occasional forced-refreshes, but all features are otherwise allowed.

An SSL-protected web port can be defined like this:

JANUS DEFINE portname 8205 WEBSERV 20 IBSIZE 4096 OBSIZE 65534 TRACE 1 - RBSIZE 4096 UPCASE SESCOOKIE RKSESSION SSLSES VARIPADDR - SSL JANSSL JUNE2017.PKEY SSLCACHE 320 SSLMAXCERTL 2048 - SSLIBSIZE 32767 SSLOBSIZE 16000 - WEBUSER WEBUSER WEBACCT WEBUSER MAXTEMP 2000 COMPRESS 1 JANUS START portname privateKeyPassword

Such an SSL port as defined above will not start unless you have already obtained a signed certificate. To do so, you can start with an unsecured port and use the JANSSL application to generate a self-signed SSL certificate.

RKWeb also provides an interface (Manage > SSL Certificates) for running the Janus Network Security application (JANSSL) for obtaining and managing SSL certificates. The RKWeb version of this application mimics the operation of the application that is described in detail in the Janus Network Security wiki pages.

Janus Web rules for RKWeb

Following are the recommended and mandatory Janus rules to run RKWeb:

*... Codepage 0037... json requires square brackets to be Unicode 5B & 5D *... translate EBCDIC BA/BB accordingly UNICODE TABLE STANDARD MAP E=BA IS U=005B UNICODE TABLE STANDARD MAP E=BB IS U=005D *... TYPE rules for serving up binaries JANUS WEB portname TYPE ANY * TEXT/HTML JANUS WEB portname TYPE ANY *.HTML TEXT/HTML JANUS WEB portname TYPE ANY / TEXT/HTML JANUS WEB portname TYPE ANY *.HTM TEXT/HTML JANUS WEB portname TYPE ANY *.GIF IMAGE/GIF JANUS WEB portname TYPE ANY *.PNG IMAGE/PNG JANUS WEB portname TYPE ANY *.CSS TEXT/CSS JANUS WEB portname TYPE ANY *.JS TEXT/JAVASCRIPT JANUS WEB portname TYPE ANY *.JPEG IMAGE/JPEG JANUS WEB portname TYPE ANY *.JPG IMAGE/JPEG JANUS WEB portname TYPE ANY *.ICO IMAGE/X-ICON *... support for the Ace Editor, part of RKWeb JANUS WEB portname ON /ACE/* OPEN M204PROC SEND * TEXT JANUS WEB portname ON /ACE/EDITOR OPEN M204PROC CMD 'RKWEB' JANUS WEB portname ON /ACE/EDITOR.JSON OPEN M204PROC CMD 'RKWEB' JANUS WEB portname ON /ACE/PROCLIST OPEN M204PROC CMD 'RKWEB' JANUS WEB portname ON /ACE/PROCLIST.JSON OPEN M204PROC CMD 'RKWEB' JANUS WEB portname ON /ACE/S.SETTINGS.PNG OPEN M204PROC SEND S.SETTINGS.PNG BINARY EXPIRE +999999 JANUS WEB portname ON /ACE/S.SIRLIB_SEQ.PNG OPEN M204PROC SEND S.SIRLIB_SEQ.PNG BINARY EXPIRE +999999 JANUS WEB portname ON /ACE/*.JS OPEN M204PROC SEND *.JS TEXT JANUS WEB portname ON /ACE/SRC/SNIPPETS/*.JS OPEN M204PROC SEND /ACE/SRC/SNIPPETS/*.JS BINARY EXPIRE +999999 JANUS WEB portname ON /ACE/SRC/*.JS OPEN M204PROC SEND /ACE/SRC/*.JS BINARY EXPIRE +999999 JANUS WEB portname ON /ACE/SRC/MODE-M204.JS OPEN M204PROC SEND MODE-M204.JS TEXT JANUS WEB portname ON /ACE/LIB/*.JS OPEN M204PROC SEND *.JS BINARY EXPIRE +999999 *... RKWeb rules: JANUS WEB portname ON /RKWEB/* CMD RKWEB JANUS WEB portname ON /RKWEB/*.CSS OPEN FILE M204PROC SEND "1.CSS TEXT EXPIRE +7200 JANUS WEB portname ON /RKWEB/*.JS OPEN FILE M204PROC SEND "1.JS TEXT EXPIRE +7200 JANUS WEB portname ON /RKWEB/*.GIF OPEN FILE M204PROC SEND "1.GIF EXPIRE +7200 JANUS WEB portname ON /RKWEB/*.PNG OPEN FILE M204PROC SEND "1.PNG EXPIRE +7200 JANUS WEB portname ON /RKWEB/*.JPG OPEN FILE M204PROC SEND "1.JPG EXPIRE +7200 JANUS WEB portname ON /RKWEB/*.JPEG OPEN FILE M204PROC SEND "1.JPEG EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/*.CSS OPEN FILE M204PROC SEND "2.CSS TEXT EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/*.JS OPEN FILE M204PROC SEND "2.JS TEXT EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/*.GIF OPEN FILE M204PROC SEND "2.GIF EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/*.PNG OPEN FILE M204PROC SEND "2.PNG EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/*.JPG OPEN FILE M204PROC SEND "2.JPG EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/*.JPEG OPEN FILE M204PROC SEND "2.JPEG EXPIRE +7200 JANUS WEB portname ON /RKWEB/*/RKWSEND/*.* OPEN FILE M204PROC SEND "2."3 EXPIRE +7200 JANUS WEB portname ON /RKWSEND/* OPEN FILE M204PROC SEND * EXPIRE +7200 *... Rules supporting the applications implemented as Janus Legacy apps. JANUS WEB portname DISALLOW /ACE* JANUS WEB portname DISALLOW /RKW* JANUS WEB portname DISALLOW /SIRLIB* JANUS WEB portname DISALLOW /DICTADMIN* JANUS WEB portname DISALLOW /DICTREPORT* JANUS WEB portname DISALLOW /DICTDOC* JANUS WEB portname DISALLOW /XREF* JANUS WEB portname DISALLOW /FILEMGMT* JANUS WEB portname DISALLOW /CCACATREPT* JANUS WEB portname DISALLOW /CCATSF* JANUS WEB portname ALLOW /ACE* USER * JANUS WEB portname ALLOW /RKW* USER * JANUS WEB portname ALLOW /SIRLIB* USER * JANUS WEB portname ALLOW /DICTADMIN* USER * JANUS WEB portname ALLOW /DICTREPORT* USER * JANUS WEB portname ALLOW /DICTDOC* USER * JANUS WEB portname ALLOW /XREF* USER * JANUS WEB portname ALLOW /FILEMGMT* USER * JANUS WEB portname ALLOW /CCACATREPT* USER * JANUS WEB portname ALLOW /CCATSF* USER * JANUS WEB portname ON /SIRLIB* CMD 'SIRLIB *' JANUS WEB portname ON /DICTADMIN* CMD 'DICTADMIN *' JANUS WEB portname ON /DICTREPORT* CMD 'DICTREPORT *' JANUS WEB portname ON /DICTDOC* CMD 'DOCUMENT *' JANUS WEB portname ON /XREF* CMD 'XREF *' JANUS WEB portname ON /FILEMGMT* CMD 'FILEMGMT *' JANUS WEB portname ON /CCACATREPT* CMD 'CCACATREPT *' JANUS WEB portname ON /CCATSF* CMD 'CCATSF *' JANUS WEB portname SCREEN /SIRLIB/* - EXITURL '/rkweb/' EXITKEY 'Exit SirLib' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /DICTADMIN* - EXITURL '/rkweb/' EXITKEY 'Exit DictAdmin' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /DICTREPORT* - EXITURL '/rkweb/' EXITKEY 'Exit DictReport' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /DICTDOC* - EXITURL '/rkweb/' EXITKEY 'Exit Document' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /XREF* - EXITURL '/rkweb/' EXITKEY 'Exit Xref' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /FILEMGMT* - EXITURL '/rkweb/' EXITKEY 'Exit FileMgmt' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /CCACATREPT* - EXITURL '/rkweb/' EXITKEY 'Exit CCACatRept' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' JANUS WEB portname SCREEN /CCATSF* - EXITURL '/rkweb/' EXITKEY 'Exit CCATSF' AUTOPF ON CSS /styles/cool.css - BGCOLOR 'white' TEXT 'black' - BLUE '#000066' GREEN '#006600' PINK '#ff80ff' RED '#ff0000' TURQUOISE '#0033ff' WHITE '#0000ff' YELLOW '#ffff00' START SUBSYSTEM DICTADMIN START SUBSYSTEM DICTREPORT START SUBSYSTEM DOCUMENT START SUBSYSTEM XREF START SUBSYSTEM FILEMGMT START SUBSYSTEM CCACATREPT START SUBSYSTEM CCATSF

Again, as described earlier in Janus Web port definition, because the above rules force users to log in with their enterprise credentials, and because RKWeb provides an interface into protected elements like passwords and APSY definitions, the port on which RKWeb runs must be SSL protected.

To verify that the Janus Web rules are defined and that the SSL and unsecured ports are started, issue a JANUS STATUS * command.

Once the rules are implemented and the port is started, You can access RKWeb with a URL like this:

https://www.mydomain.com/rkweb/welcome.html

In addition to web rules, if low-privileged users are to be given access to RKWeb, certain system level methods need to be made available to those users. The following commands are required to implement this:

SIRMETH ALLOW SYSTEMSET SUBSYSTEM RKW* NONPRE SIRMETH ALLOW SUBSYSTEMSET SUBSYSTEM RKW* NONPRE SIRMETH ALLOW SYSTEMSET SUBSYSTEM SIR* NONPRE

As implied by the recommended and mandatory JANUS WEB rules above, some RKWeb applications are implemented with Janus Legacy, which launches them into a separate browser tab. These Janus Legacy applications are not fully integrated with RKWeb, so you must use the security configured for those applications. For instance, FILEMGMT is implemented as Janus Legacy, and it might prompt the user for a separate password.

Additional setup for JANSSL

Defining a Janus port and generating a self-signed SSL certificate

You can run RKWeb on any SSL-protected Janus port, and experienced users are likely to add the recommended Janus rules to a port or ports they already have configured.

New users might need to define an initial unprotected Janus port that can then be used to generate a self-signed certificate. That certificate is then used to protect the port on which RKWeb is to run. Directions follow:

  1. Enter these rules to create a very basic Janus Web port:

    JANUS DEFINE MYWEBPORT 80 WEBSERV 10 IBSIZE 4096 OBSIZE 8192 TRACE 1 RBSIZE 4096 - UPCASE WEBUSER WEBUSER WEBACCT WEBUSER MAXTEMP 1000 JANUS WEB MYWEBPORT ON / OPEN FILE M204PROC CMD 'INCLUDE JANWEB.HOMEPAGE.HTML' JANUS WEB MYWEBPORT ON /JANSSL/* OPEN FILE M204PROC CMD 'INCLUDE JANSSL.*' JANUS WEB MYWEBPORT ON /JANWEB/* OPEN FILE M204PROC CMD 'INCLUDE JANWEB.*' * ALLOW rules that will force a logon for the JANSSL application. * These will result in a warning, which is expected, but can be ignored. JANUS WEB MYWEBPORT DISALLOW * JANUS WEB MYWEBPORT ALLOW * USER * JANUS START MYWEBPORT

  2. Use either of the following ways to connect to the JANSSL certificate management program:
    • With the following URL, invoke the Janus default home page:

      http://www.mydomain.com:xxxx

      where xxxx is the port number. In the preceding port definition, 80 is the default port for web connections. Your network administrator might require a different port number.

      On the Janus default home page, click the link to the JANSSL certificate management program.

    • Using your own domain name and port number, connect directly to the JANSSL certificate management program:

      http://www.mydomain.com:9999/janweb/sslmain.html

  3. Use the certificate management program to generate a self-signed certificate.

    The program contains ample online Help. Follow the instructions for generating a self-signed certificate.

  4. Use the self-signed certificate to protect the port from which RKWeb will run.
Retrieved from "https://m204wiki.rocketsoftware.com/index.php?title=RKTools_installation&oldid=104375"