HP 3000 Manuals HP 3000 Manuals
Completing the HP 3000 Software Installation
Security and Accounting Structure
HP LaserRX/MPE program files are installed in SCOPE.SYS and require a
minimum capability set of "CAP=IA,BA,PH,DS,MR,PM". The BUILDRX job
stream described in the next section alters the SCOPE group to implement
that capability set.
The SCOPE.SYS group should be guarded carefully since it has privileged
mode capability. Furthermore, the data collection job stream, which will
be installed in SCOPE.SYS, contains a MANAGER.SYS logon, and you can
insert passwords in that file.
Normal HP LaserRX/MPE installation procedures allow any user on the
system to execute programs in SCOPE.SYS, but only users logged on to the
SCOPE group can have other types of access. If the SCOPE group does not
have password protection, any user with a logon in the SYS account can
specify SCOPE as their logon group and get access to those files. Unless
you want most SYS users to have such access, you should enable password
protection for the SCOPE group. Note that earlier versions of HP
LaserRX/MPE did allow users logged on to the SYS account unrestricted
access, so some users might have their access denied when they change
from HP LaserRX/MPE version A to version B.
The BUILDRX job stream alters access to the SCOPE group as described
previously. It also releases security on the help and catalog files for
the UTILITY and EXTRACT programs so that they can be executed by any user
on the system. This allows a user to use UTILITY and EXTRACT to access
logfiles in groups other than SCOPE.SYS provided they have read-access to
those logfiles.
If you want to enforce different security, modify the BUILDRX job before
streaming it. If you wish to implement tight security, you should
institute password protection for the SCOPE group. These procedures are
described below.
Modifying and Streaming BUILDRX
After you transfer the installation files to the HP 3000, you must modify
and stream the BUILDRX job and verify successful installation.
1. Log on as MANAGER.SYS,SCOPE.
2. Modify the JOB command--the first line in the BUILDRX.SCOPE.SYS
file--to include the necessary passwords. You can change the
job's output priority if you do not want it deferred in the
spooler. If you want to modify normal HP LaserRX/MPE access to
group SCOPE.SYS, modify the line after the one beginning with
!ALTGROUP SCOPE.
If this is a new installation of HP LaserRX/MPE, go directly to
step 8.
3. If you are already running the SCOPE collector, stop it by purging
RUN.
4. Wait at least 1 minute.
5. Type listf log@,2 and press Enter. Check the screen to verify
that the Collector has stopped (any logfile that is still busy
will have an asterisk displayed after its name).
6. Verify that no Cooperative Services servers are active by renaming
the XL.SCOPE.SYS file (MPE XL systems) or SL.SCOPE.SYS file (MPE V
systems) as shown below. (HP LaserRX/MPE uses Cooperative
Services to connect to HP 3000s and access MPE files. No HP
LaserRX/MPE workstation other than the one that is performing the
installation should be logged on to the HP 3000 during
installation.)
rename xl.scope.sys,xlhold.scope.sys
or
rename sl.scope.sys,slhold.scope.sys
If no Cooperative Services servers are active, the file will be
renamed successfully, and you can continue installation.
If any Cooperative Services servers are active, the system will
tell you that the file could not be renamed as in the following
example:
EXCLUSIVE VIOLATION: FILE BEING ACCESSED (FSERR 90)
OPEN FAILED ON FILE XL.SCOPE.SYS, NOT RENAMED. (CIERR 372)
You cannot continue with installation if another HP LaserRX/MPE
workstation is logged on to the HP 3000.
7. Rename the HOLD file created above to its original name, for
example,
rename xlhold.scope.sys,xl.scope.sys
You must rename the file before you continue with the installation
process.
8. Stream the job BUILDRX.SCOPE.SYS.
BUILDRX modifies the accounting structure for the SCOPE group,
then installs the HP LaserRX/MPE host files.
9. Check the job listing for errors. Be sure to check for the
following:
a. SCOPE.SYS user has the minimum required capabilities.
b. Group PPC.SYS has the correct capabilities and access.
c. The HCS and HCSERVER programs with the latest versions are
in group PPC.SYS.
10. Remove the passwords from the BUILDRX job stream (see step 2).
11. If you are updating from HP LaserRX/MPE, version A:
a. Store all logfiles--raw and extracted--to tape. Do not
skip this step! You will convert these files to another
format for which there is no backward conversion process.
b. Use the UTILITY program to convert the raw logfiles as
follows:
:RUN UTILITY.SCOPE.SYS
> CONVERT LOGGLOB
> EXIT
12. If you want to institute password protection for the SCOPE
group, do so now. You must include that password in the
SCOPEJOB.SCOPE.SYS job stream or provide for it in whatever
security system or streaming facility you use.
13. If you stopped the SCOPE collector (as described in step 3), you
must stream SCOPEJOB.SCOPE.SYS before you can resume collecting
performance data.
_________________________________________________________________
NOTE Existing Users
If the file SCOPEJOB.SCOPE.SYS already exists at your site,
it will not be modified by the installation procedure. To
ensure that system messages are handled correctly, you must
modify SCOPEJOB.SCOPE.SYS so that it includes a CONTINUE
statement as shown below:
:
!TELLOP SCOPE collection program is starting
!TELLOP ***************************************
!CONTINUE
!RUN SCOPE.SCOPE.SYS
:
_________________________________________________________________
14. If you are updating from HP LaserRX/MPE version A use the UTILITY
program to convert your extracted logfiles. You will not be able
to access them until they are converted.
15. Log off of the HP 3000.
The INSTALL procedure copies files to the SCOPE, PPC, and NET groups in
the SYS account on the HP 3000. The SCOPE group is reserved for HP
LaserRX/MPE software. The PPC and NET groups are reserved for
Cooperative Services software.
The file VERSION.SCOPE.SYS contains the version number and description of
all HP LaserRX/MPE files in the SCOPE.SYS, PPC.SYS, and NET.SYS groups.
If the procedure does not find PARM and SCOPEJOB in SCOPE.SYS, the file
TEMPPARM.SCOPE.SYS will be renamed PARM.SCOPE.SYS, and the file
TEMPJOB.SCOPE.SYS will be renamed SCOPEJOB.SCOPE.SYS. See Chapter 3 in
the HP Performance Collection Software User's Manual for necessary
modifications to these files before starting the SCOPE collector.
Cleaning Up
After you install the host HP LaserRX/MPE software, you can purge the
TRUCK.SCOPE.SYS file to minimize disc space requirements with one
exception: if you will be installing HP LaserRX/MPE on subsequent HP
3000s using either the network file transfer or magnetic tape method.
Exception If you will be installing HP LaserRX/MPE on subsequent HP
3000s by using either the network file transfer or magnetic
tape method, do not purge TRUCK.SCOPE.SYS until these
subsequent installations are completed. See "Installing HP
LaserRX/MPE on Subsequent HP 3000s" later in this chapter for
additional information.
Starting Data Collection
If this is a new installation, start collecting data as soon as possible
after installation is completed.
We recommend you modify only the ID line in the PARM file (See Chapter 3
of the HP Performance Collection Software User's Manual) and stream
SCOPEJOB.SCOPE.SYS to begin data collection. Since you need performance
data to be able to determine how to set PARM file values, it is best to
begin collecting data immediately. This allows you to adjust PARM file
values after collecting a few days of data.