Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The administrative domain in PowerHA synchronizes security and configuration resources across cluster nodes in the environment. The system requires these objects at all times, so they do not make sense in an independent auxiliary storage pool (IASP). Common examples of these resources include User Profiles, Authorization Lists, Job Descriptions, Subsystem Descriptions, and Printer Device Descriptions.

When a cluster administrative domain is created, a list of nodes is supplied to indicate which nodes in the cluster make up the administrative domain. By default, all nodes will be automatically selected.

Monitored Resources

An administrative domain is made up of monitored resources, which are system resources and objects that are managed by the administrative domain. Changes that are made to a monitored resource are synchronized across nodes in the cluster administrative domain and applied to the resource on each active node. Monitored resources can be system objects like user profiles or job descriptions, or a monitored resource can also be a system resource that is not represented by a system object, such as a single system value or a system environment variable. These monitored resources are represented in the cluster administrative domain as monitored resource entries (MREs). The following help guides exist for PowerHA administrative domain can monitor up to 200,000 MREs.

MRE Synchronization

When a change to a monitored resource is made on any node within the administrative domain, that change is propagated to other nodes within the administrative domain. When a node within a cluster administrative domain is inactive, the synchronization option controls the way changes are propagated throughout the cluster.

When the synchronization option is set to Last Change (the default), changes made to the resource on the inactive node are only discarded if there was a more recent change to the resource propagated in the cluster administrative domain.

When the synchronization option is set to Active Domain, any changes made to the resource on the inactive node are discarded when the node rejoins the cluster, and the changes are replaced with information from the administrative domain.

Supported MREs

Each supported monitored resource has specific attributes on the resource that can be monitored for changes. By default, when a resource is added to the administrative domain, all supported attributes for a resource are monitored. However, the administrative domain provides the flexibility of only monitoring specific attributes when adding a monitored resource.

Expand
titleAuthorization lists (*AUTL)

The following attributes can be monitored for authorization lists:

Attribute Name

Description

AUT

Authority

OBJAUTE

Authority entry

OBJPGP

Primary group

OBJOWNER

Object owner

TEXT

Text description

Expand
titleClasses (*CLS)

The following attributes can be monitored for classes:

Attribute Name

Description

CPUTIME

Maximum CPU time

DFTWAIT

Default wait time

MAXTHD

Maximum threads

MAXTMPSTG

Maximum temporary storage

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

RUNPTY

Run priority

TEXT

Text description

TIMESLICE

Time slice

Expand
titleEthernet Line Descriptions (*ETHLIN)

The following attributes can be monitored for ethernet line descriptions:

Attribute Name

Description

ASSOCPORT

Associated port resource name

AUTOCRTCTL

Autocreate controller

AUTODLTCTL

Autodelete controller

CMNRCYLMT

Recovery limits

COSTBYTE

Relative cost per byte for sending and receiving data on the line

COSTCNN

Relative cost of being connected on the line

DUPLEX

Duplex

GENTSTFRM

Generate test frames

GRPADR

Group address

LINESPEED

Line speed

LINKSPEED

Link speed

MAXFRAME

Maximum frame size

MAXCTL

Maximum controllers

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

ONLINE

Online at IPL

PRPDLY

Propagation delay

RSRCNAME

Resource name

SECURITY

Security level of the physical line

SSAP

Source service access point (SSAP) information list

TEXT

Text description

USRDFN1

First user-defined

USRDFN2

Second user-defined

USRDFN3

Third user-defined

VRYWAIT

Vary on wait

Expand
titleIndependent Auxiliaury Storage Pool Device Descritpions (*ASPDEV)

The following attributes can be monitored for IASP device descriptions:

Attribute Name

Description

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

RDB

Relational database

RSRCNAME

Resource name

TEXT

Text description

Expand
titleJob Descriptions (*JOBD)

The following attributes can be monitored for job descriptions:

Attribute Name

Description

ACGCDE

Accounting code

ALWMLTTHD

Allow multiple threads

DDMCNV

DDM conversation

DEVRCYACN

Device recovery action

ENDSEV

End severity

HOLD

Hold on job queue

INLASPGRP

Initial ASP group

INLLIBL

Initial library list

INQMSGRPY

Inquiry message reply

JOBMSGQFL

Job message queue full action

JOBMSGQMX

Job message queue maximum size

JOBPTY

Job priority (on JOBQ)

JOBQ

Job queue

LOG

Message logging

LOGCLPGM

Log CL program commands

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

OUTPTY

Output priority (on OUTQ)

OUTQ

Output queue

PRTDEV

Print device

PRTTXT

Print text

RQSDTA

Request data or command

RTGDTA

Routing data

SPLFACN

Spooled file action

SWS

Job switches

SYNTAX

CL syntax check

TEXT

Text description

TSEPOOL

Time slice end pool

USER

User

Expand
titleNetwork Attributes (*NETA)

The following attributes can be monitored for network attributes:

Attribute Name

Description

ALWADDCLU

Allow add to cluster

DDMACC

DDM/DRDA request access

NWSDOMAIN

Network server domain

PCSACC

Client request access

Note: Each network attribute is treated as its own monitored resource entry. The resource type and attribute names are identical for these.

Expand
titleNetwork Server Configuration (*NWSCFG)

Note: There are different types of network server configuration objects. Depending on the type, different attributes may be monitored.

The following attributes can be monitored for network server configurations for service processors:

Attribute Name

Description

EID

Enclosure identifier

INZSP

Initialize service processor

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

SPAUT

Service processor authority

SPCERTID

Service processor certificate identifier

SPINTNETA

Service processor Internet address

SPNAME

Service processor name

TEXT

Text description

The following attributes can be monitored for network server configurations for remote systems:

Attribute Name

Description

BOOTDEVID

Boot device identifier

CHAPAUT

Target CHAP authentication

DELIVERY

Delivery method

DYNBOOTOPT

Dynamic boot options

INRCHAPAUT

Initiator CHAP authentication

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

RMTIFC

Remote interfaces

RMTSYSID

Remote system identifier

SPNWSCFG

Service processor network server configuration that is used to manage the remote server

TEXT

Text description

The following attributes can be monitored for network server configurations for connection security:

Attribute Name

Description

IPSECRULE

IP security rules

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

TEXT

Text description

Expand
titleNetwork Server Descriptions (*NWSD)

Note: There are different types of network server description objects. Depending on the type, different attributes may be monitored.

The following attributes can be monitored for network server descriptions for integrated network servers:

Attribute Name

Description

ALWDEVRSC

Allowed device resources

CFGFILE

Configuration file

CODEPAGE

ASCII code page representing the character set to be used by this network server

EVTLOG

Event log

MSGQ

Message queue

NWSSTGL

Storage space links

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

PRPDMNUSR

Propagate domain user

RSRCNAME

Resource name

RSTDDEVRSC

Restricted device resources

SHUTDTIMO

Shut down time out

SYNCTIME

Synchronize date and time

TCPDMNNAME

TCP/IP local domain name

TCPHOSTNAM

TCP/IP host name

TCPPORTCFG

TCP/IP port configuration

TCPNAMSVR

TCP/IP name server system

TEXT

Text description

VRYWAIT

Vary on wait

WINDOWSNT

Windows network server description

The following attributes can be monitored for network server descriptions for integrated network servers (server operating system *AUX):

Attribute Name

Description

CODEPAGE

ASCII code page representing the character set to be used by this network server

DSBUSRPRF

Disable user profiles

EVTLOG

Event log

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

PRPDMNUSR

Propagate domain user

RSRCNAME

Resource name

SHUTDTIMO

Shut down time out

SRVOPT

Serviceability options

SYNCTIME

Synchronize date and time

TCPDMNNAME

TCP/IP local domain name

TCPHOSTNAM

TCP/IP host name

TCPPORTCFG

TCP/IP port configuration

TEXT

Text description

VRYWAIT

Vary on wait

The following attributes can be monitored for network server descriptions for iSCSI connections:

Attribute Name

Description

ACTTMR

Activation timer

ALWDEVRSC

Allowed device resources

CFGFILE

Configuration file

CMNMSGQ

Communications message queue

CODEPAGE

ASCII code page representing the character set to be used by this network server

DFTSECRULE

Default IP security rule

DFTSTGPTH

Default storage path

EVTLOG

Event log

MLTPTHGRP

Multi-path group

MSGQ

Message queue

NWSCFG

Network server configuration

NWSSTGL

Storage space links

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

PRPDMNUSR

Propagate domain user

RMVMEDPTH

Removable media path

RSRCNAME

Resource name

RSTDDEVRSC

Restricted device resources

SHUTDTIMO

Shut down time out

STGPTH

iSCSI storage paths of the network server

SVROPT

Serviceability options

SYNCTIME

Synchronize date and time

TCPDMNNAME

TCP/IP local domain name

TCPHOSTNAM

TCP/IP host name

TCPNAMSVR

TCP/IP name server system

TCPPORTCFG

TCP/IP port configuration

TEXT

Text description

VRTETHCTLP

Virtual Ethernet control port

VRTETHPTH

Virtual Ethernet path

VRYWAIT

Vary on wait

Expand
titleNetwork Server Storage Spaces (*NWSSTG)

The following attributes can be monitored for network server storage spaces:

Attribute Name

Description

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

RSCALCPTY

Resource allocate priority

SIZE

Size

TEXT

Text description

TOTALFILES

Total files

Expand
titleNetwork Server Host Adapter Device Descriptions (*NWSHDEV)

The following attributes can be monitored for network server host adapter device descriptions:

Attribute Name

Description

CMNRCYLMT

Recovery limits

LCLIFC

Associated local interface

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

ONLINE

Online at IPL

RSRCNAME

Resource name

TEXT

Text description

Expand
titleOptical Device Descriptions (*OPTDEV)

The following attributes can be monitored for optical device descriptions:

Attribute Name

Description

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

ONLINE

Online at IPL

RSRCNAME

Resource name

TEXT

Text description

Expand
titlePrinter Device Descriptions (*PRTDEV)

Note: There are different types of printer device description objects. Depending on the type, different attributes may be monitored.

The following attributes can be monitored for printer device descriptions for *LAN connections:

Attribute Name

Description

ACTTMR

Activation timer

ADPTADR

LAN remote adapter address

ADPTTYPE

Adapter type

ADPTCNNTYP

Adapter connection type

AFP

Advanced function printing

CHRID

Character identifier

FONT

Font

FORMFEED

Formfeed

IMGCFG

Image configuration

INACTTMR

Inactivity timer

LNGTYPE

Language type

LOCADR

Location location address

MAXPNDRQS

Maximum pending request

MFRTYPMDL

Manufacturer type and model

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

ONLINE

Online at IPL

PORT

Port number

PRTERRMSG

Print error message

PUBLISHINF

Publishing information

RMTLOCNAME

Remote location

SEPDRAWER

Separator drawer

SEPPGM

Separator program

SNMPUSR

SNMP user name

SNMPCNTX

SNMP context name

SWTLINLST

Switched line list

SYSDRVPGM

System driver program

TEXT

Text description

TRANSFORM

Host printer transform

USRDFNOBJ

User-defined object

USRDFNOPT

User-defined options

USRDRVPGM

User-defined driver program

USRDTATFM

Data transform program

WSCST

Workstation customizing object

The following attributes can be monitored for printer device descriptions for *VRT connections:

Attribute Name

Description

CHRID

Character identifier

FORMFEED

Form feed

IGCFEAT

DBCS FEATURE

IMGCFG

Image configuration

MAXLENRU

Maximum length of request unit

MFRTYPMDL

Manufacturer type and model

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

ONLINE

Online at IPL

PRTERRMSG

Print error message

PUBLISHINF

Publishing information

SEPDRAWER

Separator drawer

SEPPGM

Separator program

TEXT

Text description

TRANSFORM

Host print transform

USRDFNOBJ

User-defined object

USRDFNOPT

User-defined options

USRDRVPGM

User-defined driver program

USRDTAFM

Data transform program

WSCST

Workstation customizing object

SEPPGM

Separator program

SWTLINLST

Switched line list

SYSDRVPGM

System driver program

TEXT

Text description

TRANSFORM

Host printer transform

USRDFNOBJ

User-defined object

USRDFNOPT

User-defined options

USRDRVPGM

User-defined driver program

USRDTATFM

Data transform program

WSCST

Workstation customizing object

Expand
titleSubsystem Descriptions (*SBSD)

The following attributes can be monitored for subsystem descriptions:

Attribute Name

Description

AJE

Autostart job entry

CMNE

Online at IPL

JOBQE

Job queue

MAXJOBS

Maximum number of jobs

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary group

PJE

Prestart job entry

RMTLOCNAME

Remote location name

RTGE

Routing entry

SGNDSPF

Sign on display

SYSLIBLE

Subsystem library

TEXT

Text description

WSNE

Workstation name entry

WSTE

Workstation type entry

Expand
titleSystem Environment Variables (*ENVVAR)

The following attributes can be monitored for system environment variables:

Attribute Name

Description

Any *SYS level environment variable can be monitored. The attribute and resource name are both the same as the environment variable's name.

Note: Each environment variable is treated as its own monitored resource entry. The resource type and attribute names are identical for these.

Expand
titleSystem Vaues (*SYSVAL)

The following attributes can be monitored for system values:

Attribute Name

Description

QACGLVL

Accounting level

QACTJOBITP

Allow jobs to be interrupted

QALWOBJRST

Prevents anyone from restoring a system-state object or an object that adopts authority

QALWUSRDMN

Allows user domain objects

QASTLVL

Assistance level

QATNPGM

Attention program

QAUDCTL

Audit control

QAUDENDACN

Audit journal error action

QAUDFRCLVL

Auditing force level

QAUDLVL

Auditing level

QAUDLVL2

Auditing level extension

QAUTOCFG

Automatic device configuration

QAUTORMT

Remote controllers and devices

QAUTOVRT

Automatic virtual device configuration

QCCSID

Coded character set identifier

QCFGMSGQ

Message queue for lines, controllers, and devices

QCHRID

Default graphic character set and code page used for displaying or printing data

QCHRIDCTL

Character identifier control for the job

QCMNRCYLMT

Automatic communications error recovery

QCNTRYID

Country or region identifier

QCRTAUT

Authority for new objects

QCRTOBJAUD

Auditing new objects

QCTLSBSD

Controlling subsystem or library

QCURSYM

Currency symbol

QDATFMT

Date format

QDATSEP

Date separator

QDBRCVYWT

Wait for database recovery before completing restart

QDECFMT

Decimal format

QDEVNAMING

Device naming convention

QDEVRCYACN

Device recovery action

QDSCJOBITV

Time out interval for disconnected jobs

QDSPSGNINF

Controls the display of sign-on information

QENDJOBLMT

Maximum time for immediate end

QFRCCVNRST

Force conversion on restore

QHSTLOGSIZ

History log file size

QIGCCDEFNT

Coded font name

QIGCFNTSIZ

Coded font point size

QINACTITV

Inactive job time-out interval

QINACTMSGQ

Timeout interval action

QIPLTYPE

Type of restart

QJOBMSGQFL

Job message queue full action

QJOBMSGQMX

Job message queue maximum size

QJOBMSGQSZ

Initial size of job message queue in kilobytes (KB)

QJOBMSGQTL

Maximum size of job message queue (in KB)

QJOBSPLA

Initial size of spooling control block for a job (in bytes)

QKBDBUF

Keyboard buffer

QKBDTYPE

Keyboard language character set

QLANGID

Default language identifier

QLIBLCKLVL

Lock libraries in a user job's library search list

QLMTDEVSSN

Limit device sessions

QLMTSECOFR

Limit security officer device access

QLOCALE

Locale

QLOGOUTPUT

Produce printer output for job log

QMAXACTLVL

Maximum activity level of the system

QMAXJOB

Maximum number of jobs that are allowed on the system

QMAXSGNACN

The system's response when the limit imposed by QMAXSIGN system value is reached

QMAXSIGN

Maximum number of not valid sign-on attempts allowed

QMAXSPLF

Maximum printer output files

QMLTTHDACN

When a function in a multithreaded job is not threadsafe

QPASTHRSVR

Available display station pass-through server jobs

QPRBFTR

Problem log filter

QPRBHLDITV

Minimum retention

QPRTDEV

Default printer

QPRTKEYFMT

Print key format

QPRTTXT

Up to 30 characters of text that can be printed at the bottom of listings and separator pages

QPWDCHGBLK

Minimum time between password changes

QPWDEXPITV

Number of days for which a password is valid

QPWDEXPWRN

Password expiration warning interval system

QPWDLMTACJ

Limits the use of adjacent numbers in a password

QPWDLMTCHR

Limits the use of certain characters in a password

QPWDLMTREP

Limits the use of repeating characters in a password

QPWDLVL

Password level

QPWDMAXLEN

Maximum number of characters in a password

QPWDMINLEN

Minimum number of characters in a password

QPWDPOSDIF

Controls the position of characters in a new password

QPWDRQDDGT

Require a number in a new password

QPWDRQDDIF

Controls whether the password must be different from the previous passwords

QPWDRULES

Password rules

QPWDVLDPGM

Password approval program

QPWRDWNLMT

Maximum time for immediate shutdown

QRCLSPLSTG

Automatically clean up unused printer output storage

QRETSVRSEC

Retain server security data indicator

QRMTSIGN

Remote sign-on

QRMTSRVATR

Remote service attribute

QSCANFS

Scan file systems

QSCANFSCTL

Scan control

QSCPFCONS

Console problem occurs

QSECURITY

System security level

QSETJOBATR

Set job attributes

QSFWERRLOG

Software error log

QSHRMEMCTL

Allow use of shared or mapped memory with write capability

QSPCENV

Default user environment

QSPLFACN

Spooled file action

QSRTSEQ

Sort sequence

QSRVDMP

Service log for unmonitored escape messages

QSSLCSL

Secure Sockets Layer cipher specification list

QSSLCSLCTL

Secure Sockets Layer cipher control

QSSLPCL

Secure Sockets Layer protocols

QSTRUPPGM

Set startup program

QSTSMSG

Display status messages

QSYSLIBL

System library list

QTIMSEP

Time separator

QTSEPOOL

Indicates whether interactive jobs should be moved to another main storage pool when they reach time slice end

QUPSMSGQ

Uninterruptible power supply message queue

QUSEADPAUT

Use adopted authority

QUSRLIBL

User part of the library list

QVFYOBJRST

Verify object on restore

Note: Each system value is treated as its own monitored resource entry. The resource type and attribute names are identical for these.

Expand
titleTape Device Descriptions (*TAPDEV)

The following attributes can be monitored for tape device descriptions:

Attribute Name

Description

ASSIGN

Assign device at vary on

MSGQ

Message queue

OBJAUTE

Authority entry

OBJAUTL

Authorization list

OBJOWNER

Object owner

OBJPGP

Primary object

ONLINE

Online at IPL

RSRCNAME

Resource name

TEXT

Text description

UNLOAD

Unload device at vary off

Expand
titleTCP/IP Attributes (*TCPA)

The following attributes can be monitored for TCP/IP attributes:

Attribute Name

Description

ARPTIMO

Address resolution protocol (ARP) cache timeout

ECN

Enable explicit congestion notification (ECN)

IP6TMPAXP

IPv6 temporary address excluded prefix

IPDEADGATE

IP dead gateway detection

IPDTGFWD

IP datagram forwarding

IPPATHMTU

Path maximum transmission unit (MTU) discovery

IPQOSBCH

IP QoS datagram batching

IPQOSENB

IP QoS enablement

IPQOSTMR

IP QoS timer resolution

IPRSBTIMO

IP reassembly timeout

IPSRCRTG

IP source routing

IPTTL

IP time to live (hop limit)

LOGPCLERR

Log protocol errors

NFC

Network file cache

TCPCLOTIMO

TCP time-wait timeout

TCPCNNMSG

TCP close connection message

TCPKEEPALV

TCP keep alive

TCPMINRTM

TCP minimum retransmit time

TCPR1CNT

TCP R1 retransmission count

TCPR2CNT

TCP R2 retransmission count

TCPRCVBUF

TCP receive buffer size

TCPSNDBUF

TCP send buffer size

TCPURGPTR

TCP urgent pointer

UDPCKS

UDP checksum

Note: Each TCP/IP attribute is treated as its own monitored resource entry. The resource type and attribute names are identical for these.

Expand
titleUser Profiles (*USRPRF)

The following attributes can be monitored for user profiles:

Attribute Name

Description

ACGCDE

Accounting code

ASTLVL

Assistance level

ATNPGM

Attention program

AUDLVL

User action auditing

CCSID

Coded character set ID

CHRIDCTL

Character identifier control

CNTRYID

Country or region ID

CURLIB

Current® library

DLVRY

Delivery

DSPSGNINF

Display sign-on information

GID

Group ID number

GRPAUT

Group authority

GRPAUTTYP

Group authority type

GRPPRF

Group profile

HOMEDIR

Home directory

INLMNU

Initial menu

INLPGM

Initial program to call

JOBD

Job description

KBDBUF

Keyboard buffering

LANGID

Language ID

LCLPWDMGT

Local password management

LMTCPB

Limit capabilities

LMTDEVSSN

Limit device sessions

LOCALE

Locale

MAXSTG

Maximum allowed storage

MAXSTGLRG

Maximum allowed storage large

MSGQ

Message queue

OBJAUD

Object auditing value

OBJAUTE

Authority entry

OBJOWNER

Object owner

OBJPGP

Primary group

OUTQ

Output queue

OWNER

Owner

PASSWORD

User password

PRTDEV

Print device

PTYLMT

Highest schedule priority

PWDEXP

Set password to expired

PWDEXPITV

Password expiration interval

SETJOBATR

Locale job attributes

SEV

Severity code filter

SPCAUT

Special authority

SPCENV

Special environment

SRTSEQ

Sort sequence

STATUS

Status

SUPGRPPRF

Supplemental groups

TEXT

Text description

UID

User ID number

USRCLS

User class

USREXPDATE

User expiration date

USREXPITV

User expiration interval

USROPT

User options

See the following pages for additional information on configuring and managing the Administrative Domain:

...