(MIC) LINK Command-Manage Command Linkages

CA MIC Statements and Commands › (MIC) LINK Command-Manage Command Linkages

(MIC) LINK Command-Manage Command Linkages

The LINK command lets you create, modify, and delete linkages that enable consoles, products, internal and in-stream command sources, and TSO users on the local system to issue commands to any system. Each linkage you create by using the LINK ADD command has a unique name based on the command source you specify. The following are examples of linkage command sources:

CONSOLE=TAPECON1
PRODUCT=RCS
TSOUSER=DSIMK11

After a linkage is defined, you can modify or delete the linkage by specifying the same command source named on subsequent LINK commands. There cannot be two linkages with the same command source (except for exclusive linkages).

Scope: Local

This command has the following format:

Link Modifier

Local Command Source

Target Systems

Target Pool

Target Authority

LINK [{ADD|
     DELETE|
     REPLACE}]

[{ALL|
 CONSOLE={conmask |
          conname} |
 INSTREAM |
 INTERNAL |
 PRODUCT={ALL|ssname} |
 SOURCE |
 TSOUSER={ALL|userid}}]

 [SYSID [=ALL |
        ALLICMF |
        ALLSYS |
        EXTERNAL |
        EXTSYS |
        LOCAL |
        sysids}]]

[POOL={DEDICATE |
       SHARE}]
[TGTCONS=tgtconname]

[{AUTHORITY =
   {ALL |
    INFO |
    MASTER |
    NONE |
    SOURCE} |
    CONS |
    IO |
    SYS} ]

and for z/VM...

[USERPRIV]
[OPERPRIV]

ADD: (Optional) Creates a linkage if this linkage does not exist. Otherwise, GCMF modifies the existing linkage.

ALL

(Optional) Authorizes all local consoles to issue commands through this linkage. ALL does not include extended consoles for security reasons.

Note: Do not confuse the ALL operand with the value ALL that you can specify on the PRODUCT, TSOUSER, SYSID, and AUTHORITY operands.

When you specify ALL, do not specify a TGTCONS. Either accept the default value, POOL=SHARE, or specifically set POOL=DEDICATE or POOL=SHARE.

AUTHORITY

(Optional.) Assigns the specified authority level to the target console when executing a cross-system command. When a cross-system command is directed to a z/OS system, the target console assumes the assigned authority, and commands are restricted to that authority level.

When a cross-system command is directed to a z/VM system, CA MIC uses the LINKAUTH MIM file to determine the authority level required to execute the command. The command is rejected if the user does not have adequate authority.

Specify one of the following values on the AUTHORITY operand:

ALL: Authorizes the target console to execute any information request, system control, I/O control, or console control command. This option is equivalent to specifying the command AUTH=(CONS, IO, and SYS). The ALL authority level does not include MASTER authority, or the z/VM OPERPRIV and USERPRIV authority levels.

CONS: (Optional) Authorizes the target console to execute console control commands, such as VARY, when changing the status of a console.

INFO: Authorizes the target console to execute informational commands, such as MONITOR, DISPLAY, and REPLY, when replying to a WTOR.

IO: (Optional) Authorizes the target console to execute I/O control commands, such as MOUNT, UNLOAD, and VARY, for any device except a console.

MASTER: Authorizes the target console to execute commands that require master console authority. The MASTER authority level includes ALL authority, as well as the z/VM OPERPRIV and USERPRIV authority levels.

NONE: Prevents the target console from executing any cross-system command.

OPERPRIV: Used with z/VM, authorizes the user to execute any cross-system command that has been assigned to the OPERPRIV class file in the LINKAUTH MIM file of the target system.

SOURCE

Authorizes the target console to execute any cross-system command that the command source is authorized to issue.

Note: AUTHORITY=SOURCE is a default value.

SYS: (Optional) Authorizes the target console to execute system control commands, such as SET, START, and STOP.

USERPRIV: Used with z/VM, authorizes the user to execute any cross-system command that has been assigned to the USERPRIV class file in the LINKAUTH MIM file of the target system.

From your own console, you cannot issue a LINK command that increases the authority of that console. However, another console can issue a LINK command that increases the authority of your console to any level, but not exceeding the authority of the other console.

For example, if you want to issue cross-system console control commands from your INFO-level console, then you need to specify LINK AUTHORITY=CONS from a console that is authorized to issue console control commands.

Note: You only need SYS authority to issue a LINK command with MASTER authority.

Default: AUTHORITY=SOURCE

CONSOLE

(Optional) Specifies the name of the console permitted to issue cross-system commands through this linkage. We recommend you use console names containing alphanumeric characters. You can use the CONSOLE parameter for both MCS and extended consoles.

You can use masking for console names to define a linkage that involves more than one console. For conmask, you can use the pound sign (#) wildcard to substitute for a single character, or the asterisk (*) wildcard to substitute for multiple characters in the console name.

Note: You cannot use dedicated or exclusive linkages when masking a console name. You must use a discrete shared link.

DELETE: (Optional) Deletes part of the linkage or the entire linkage, depending on what other operands you specify.

INSTREAM: (Optional) Authorizes JCL to issue commands through this linkage (for example, through //COMMAND in JCL).

INTERNAL: (Optional) Authorizes programs to issue commands internally (without a console name associated with the command) through this linkage. For example, this could be done using the CA SYSVIEW LOG or MTT panels.

POOL: (Optional) Indicates that GCMF should use the next available member of the console pool to execute commands. Specify one of the following values on the POOL operand.

DEDICATE: Creates a dedicated linkage in which the same console pool member is used to execute all commands from the source on the linkage. The console is removed from the pool.

SHARE

Creates a shared linkage in which any available console pool member is used to execute commands. GCMF may share (or reassign) the selected console to another linkage as needed.

Default: POOL=SHARE

PRODUCT

(Optional) Identifies the products that are authorized to issue commands through this linkage. Specify one of these values on the PRODUCT operand:

ALL

Authorizes all products to issue commands.

ssname

Specifies the subsystem name of the product that is authorized to issue commands. For example, if RCS is the subsystem name for CA Remote Console, then you can authorize CA Remote Console to issue cross-system commands by specifying PRODUCT=RCS.

The default subsystem names are as follows:

OPSS for CA OPS/MVS
RCS for CA Remote Console

REPLACE: Replaces part or all of the linkage definition, depending on what other operands you specify.

SOURCE: (Optional) Authorizes the current console to issue commands through this linkage. This operand is invalid when the LINK command is issued from the MIMCMNDS or MIMSYNCH member or from internal or in-stream (JCL) sources.

SYSID

(Optional) Identifies the systems to which the command source can issue commands. Specify one of the following values:

ALL: Allows the command source to issue commands to all systems, including ICMF systems. ALL is the default.
ALLICMF: Allows the command source to issue commands to all ICMF systems only (excluding control file systems).
ALLSYS: Allows the command source to issue commands to all control file systems only (excluding ICMF systems).
EXTERNAL: Allows the command source to issue commands to all systems except the local system.
EXTSYS: Allows the command source to issue commands to all control file systems except the local system (excluding ICMF systems).
LOCAL or *: Allows the command source to issue commands to the local system only.
sysids: Specifies the IDs of the systems to which the command source can issue commands. Specify up to 32 IDs. You can use system names, aliases, or index numbers to identify systems.

You must specify POOL=DEDICATE or POOL=SHARE if you specify more than one system ID for sysids, or if you specify any keyword value except LOCAL. The default is POOL=SHARE.

To issue a cross-system command with a scope value of ALL, you must create a linkage that specifies SYSID=ALL. To issue a cross-system command with a scope value of EXTERNAL, you must create a linkage that specifies SYSID=EXTERNAL or SYSID=ALL.

Default: SYSID=ALL

TGTCONS

(Optional) Creates an exclusive linkage to the designated console, tgtconname. The console executes all commands using this linkage. This console can be an active or an inactive MCS console; however, it cannot be a member of the console pool of GCMF, and it cannot be currently allocated to another product.

Notes:

This parameter is ignored when linking to a z/VM system.
Do not specify the TGTCONS parameter on a LINK ALL command. Use POOL=SHARE or POOL=DEDICATE when you want to authorize all consoles to use this link.
We recommend that you not use this parameter because exclusive linkages establish a one-to-one relationship between a command source on the local system and the target console on one and only one external system. For more information, see the chapter “Advanced Topics” in the CA MIC Programming Guide.

TSOUSER

(Optional) Authorizes a TSO user to issue commands through this linkage. Specify one of the following values on the TSOUSER operand:

ALL: Authorizes all TSO users on the local system.
userid: Specifies the ID of the TSO user who is authorized to issue commands through this linkage.

Default: LINK=ADD

Usage Notes: LINK Command

The LINK command can be specified in the MIMCMNDS or MIMSYNCH member of the MIMPARMS data set. You also can issue this command from a console.
You must be authorized to issue system control commands to issue the LINK command. TSO users generally are not authorized to issue system control commands.
GCMF always uses a specific linkage first if both a specific and a nonspecific linkage can be used to direct a command to another system. For example, if there is a specific linkage between console SYSAMSTR on the local system and a console on system SYSB as well as a nonspecific linkage between local consoles and system SYSB, then GCMF uses the specific linkage to route commands from console SYSAMSTR. Similarly, if a console issuing a cross-system command is on a specific linkage and the name of the console also matches a linkage with a wildcard name, then the specific linkage is used.
Cross-system commands and responses are seen on both the issuing console and the target console when an active MCS console is the target. Because this may cause confusion, we recommend that you do not use an active MCS console as the target.
Cross-system commands and responses are never seen on the target system when a subsystem console, extended console, or inactive console is the target.
If you issue a LINK command in the MIMPARMS data set with an ID for an ICMF system on the SYSID operand, then you must have previously defined the ICMF system using an IDEFSYS command.
When you specify the SOURCE operand, the command source for the linkage is the source from which the LINK command is being issued.

Examples: LINK Command

To create a linkage between all consoles (MCS, subsystem, and Extended MCS) on the local system and all external systems that allow INFO level commands only, issue this command:
```
LINK CONSOLE=* AUTHORITY=INFO SYSTEM=EXTERNAL
```
To create a linkage for all consoles (or TSO CONSOLE users) with names starting with B1 to issue MASTER level commands to all systems, issue this command:
```
LINK CONSOLE=B1* AUTHORITY=MASTER
```
To create a shared linkage between product AA and the first available member of the console pool on system B1, issue this command:
```
LINK PRODUCT=AA SYSID=B1 POOL=SHARE
```
To change the shared linkage for console MSTR to a dedicated linkage, issue this command:
```
LINK CONSOLE=MSTR POOL=DEDICATE
```
To delete the shared linkage between the current console and all other systems, issue this command:
```
LINK DELETE
```
To create an exclusive linkage between the local console named TAPECON1 and console SYSCMSTR on system A1, issue this command:
```
LINK CONSOLE=TAPECON1 SYSID=A1 TGTCONS=SYSCMSTR
```
To create a shared linkage between all consoles with names beginning with ABC and all systems, except the local system, issue this command:
```
LINK CONSOLE=ABC* SYSID=EXT
```