Work with Socket Rules - Accept Server

WARNING: Misuse of Socket Rules can render your system unreachable via TCP. Exercise extreme caution when using this feature. Consider adding Socket Rules as not active and testing them using the Socket Rule test feature, and setting them to be not used by that feature and testing the rule set before removing them. If you render your system unreachable via TCP, you will need to access the system via the console in order to fix the rules (or to deactivate the Socket Rule servers).

How to Get There

On the Security Configuration Menu, select option 13.

What it Does

The Work with Socket Rules - Accept Server panel allows you to view, create, copy, change, or delete Socket Rules.

Socket Rules are examined by Powertech Powertech Exit Point Manager for IBM i exit programs until a match is found (based on a Socket Rule's Socket Conditions).

Field Descriptions

System

System indicates the target of any operations you perform. When you add rules, for example, those rules will be sent to, and will affect processing on, the System named.

Server

A Server in Powertech Exit Point Manager for IBM i is a controlled entry point into your system. These entry points are determined and defined by IBM. Powertech Exit Point Manager for IBM i has assigned easy-to-remember names to these controlled entry points.

Function

A Function, or Server Function, in Powertech Exit Point Manager for IBM i represents a class of operations that a given Server may perform. For example, the *SIGNON Server classifies its operations as those pertaining to changing passwords, generating authentication tokens, and retrieving signon information. Powertech Exit Point Manager for IBM i has assigned easy-to-remember names to these Functions, such as CHGPWD, GENAUTTKN and RETRIEVE.

Position to Seq

Used to position the list.

Opt

Enter a valid option from the list of options provided on the list panel.

Seq

The sequence number of a Socket Rule determines the order in which it will be evaluated by the exit program, with the lowest sequence number being evaluated first. Socket Rules are evaluated until a match is found.

Description

The Socket Rule description is a short textual description of the Socket Rule. It is typically used to indicate the purpose of the Socket Rule.

Aut

Authority represents the action to be taken when a rule is found that matches the data present on a transaction.

The valid values are:

Y Powertech Exit Point Manager for IBM i will allow requests when this rule is enforced.
N Powertech Exit Point Manager for IBM i will reject requests when this rule is enforced.
* The value * will cause the rule to inherit the value from the default Socket Rule (sequence number 99999). This default rule may not be set to the value *.
Audit

The Audit flag controls the logging of transactions to the Log Journal set up on the Work with Powertech Exit Point Manager for IBM i System Values panel.

The valid values are:

* The value * will cause the rule to inherit the value from the default Socket Rule (sequence number 99999). This default rule may not be set to the value *.
Y Logs all requests when this rule is enforced.
N Logs only access failures (rejects) for this rule.
Message

The Message flag controls the sending of messages to the Log Message Queue set up on the Work with Powertech Exit Point Manager for IBM i System Values panel.

* The value * will cause the rule to inherit the value from the default Socket Rule (sequence number 99999). This default rule may not be set to the value *.
Y Sends a message when this rule is enforced.
N Does not send a message when this rule is enforced.
Capture

The Capture flag controls whether transactions are remembered in Powertech Exit Point Manager for IBM i. Unlike some other rule types, a captured Socket Rule cannot be memorized.

The valid values are:

* The value * will cause the rule to inherit the value from the default Socket Rule (sequence number 99999). This default rule may not be set to the value *.
Y Captures the transaction when this rule is enforced.
N Does not capture the transaction when this rule is enforced.
Act

The Socket Rule Active flag determines whether the rule will be evaluated by the exit point program.

It can be useful to initially set a Socket Rule as not active in order to test it without enforcing it.

The valid values are:

Y Powertech Exit Point Manager for IBM i will evaluate the rule.
N Powertech Exit Point Manager for IBM i will not evaluate the rule.

The value N is not allowed for the default Socket Rule (sequence number 99999).

Tst

The Socket Rule Test flag determines whether the rule will be evaluated by the Socket Rule test facility.

It can be useful to flag a rule to not be tested in order to verify the effects of removing that rule.

The valid values are:

Y The Socket Rule test facility will evaluate the rule.
N The Socket Rule test facility will not evaluate the rule.

The value N is not allowed for the default Socket Rule (sequence number 99999).

Options

2=Change

Choose this option to open the Change Socket Rule panel, where you can modify a Socket Rule's attributes.

3=Copy

Choose this option to open the Copy Socket Rule panel, where you can copy a Socket Rule.

4=Delete

Choose this option to delete the Socket Rule.

5=Display

Choose this option to display the Socket Rule.

8=Conditions

Choose this option to open the Work with Socket Conditions panel, where you can view, create, copy, change, or delete Socket Conditions.

Command Keys

F3 (Exit): Exit the current screen without processing any pending changes.

F5 (Refresh): Refreshes the panel with the most current data.

F6 (Create rule): Creates a new item.

F7 (Select System): Use this command key to work with data from a different System.

F10 (View2/View3): Change view.

F12 (Cancel): Discards changes and returns to the prior panel.

F13 (Display msgs): Displays messages for the current user.

F14 (Work sbm job): Displays jobs submitted from the current user.

F15 (Work w/spooled files): Works with spooled files for the current user.

F24 (More keys): This shows additional function keys that can be used for this display.