sme versus dsme: a comparison - ibm

Copyright IBM 2005, 2008

SME versus DSME:A Comparison

Johnathan Harterz/OS CommServer Development

[email protected]

1


Agenda

Introduction

When Are The SME And DSME Invoked?

SME And DSME Parameter Lists

SME And DSME Return Codes

Closing Remarks

2


SME And DSME Comparison - Introduction

SME

Called By Session Services (SSCP)

Subarea-side function

Uses synchronous PAB

Called During Session Establishment

Init, CDInit, InitOtherCD, BIND and RouteSetup RUs

Called With Subarea Information

Can Be Traced Using MODIFY TRACE,TYPE=EXIT,ID=ISTEXCAA

DSME

Called By Directory Services (CP)

APPN-side function

Uses asynchronous PAB

Called During Search Processing

Internal search or external Locate

No knowledge of sessions!

Called With APPN Information

Can Be Traced Using MODIFY TRACE,TYPE=EXIT,ID=ISTEXCDM

Note: Application GDS Variable is included in DSME trace

3


SME And DSME Comparison - Functions

SME Similar functions

BeginInitial AuthorizationSecondary AuthorizationADJSSCP SelectionGW Path SelectionExit ReplacementExit ReplacedEnd

Other functionsAlias Name SelectionInitial AccountingFinal AccountingXRF Session SwitchLEN ALS SelectionVirtual Route SelectionHPR VR Selection

DSME Similar functions

BeginInitial AuthorizationRedrive Initial AuthorizationBorder Node SelectionICN Selection (V1R8 and above)Exit ReplacingExit ReplacedEnd

Other functionsAPAR OA12411 (V1R7) allows DMSE to convert non-authentic NETIDs to authentic NETIDsCDServer SelectionAlternate CDServer SelectionCentral Resource Registration Selection

4


Agenda

Introduction




Closing Remarks

5


SME/DSME Invocation: Subarea PLU-Init

SSCP-SSCP

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

(a) (a)

(b)(b)

SSCP-SSCP SSCP-SSCP

(a)

(b)

SSCP CSSCP A SSCP B SSCP D

(a,b)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

6


SME/DSME Invocation: Subarea SLU-Init

SSCP-SSCP

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

(a) (a)

(b)(b)

SSCP-SSCP SSCP-SSCP

(a)

(b)

SSCP CSSCP A SSCP B SSCP D

(a,b)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

7


SME/DSME Invocation: Subarea/LEN PLU-Init

SSCP CSSCP A

SSCP-SSCP LEN LEN

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

SSCP B SSCP D

(a)

(b)(a,b) (a,b)

(a,b)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

8


SME/DSME Invocation: SA/APPN PLU-Init (ISR)

SSCP-SSCP APPN APPN

Locate Req

Locate Rpy

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

CP C

SSCP CSSCP A

CP B

SSCP B

CP D

SSCP D

(a) (a)

(b)(b) (a,b)

(c) (c) (c)

(a,b)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

9


SME/DSME Invocation: SA/APPN PLU-Init (HPR)

SSCP-SSCP APPN APPN

Locate,Find

Locate,Found

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

CP C1

SSCPC1

SSCP A

CP B

SSCP B

CP D

SSCP D

(a) (a)

(b)(b) (a,b)

(c) (c) (c)

CP C2

SSCPC2

(c)

(a,b)

(RTP1) (RTP2)

(ANRonly)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

10


SME/DSME Invocation: SA/APPN SLU-Init (ISR)

SSCP-SSCP APPN APPN

Locate Req

Locate Rpy

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

CP C

SSCP CSSCP A

CP B

SSCP B

CP D

SSCP D

(a) (a)

(b)(b)(a,b)

(c) (c) (c)

(a,b)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

11


CP C1

SSCPC1

SME/DSME Invocation: SA/APPN SLU-Init (HPR)

SSCP-SSCP APPN APPN

Locate Req

Locate Rpy

CDINIT Req

CDINIT Rsp

BIND Req

BIND Rsp

SSCP A

CP B

SSCP B

CP D

SSCP D

(a) (a)

(b)(b)(a,b)

(c) (c)(c)

CP C2

SSCPC2

(c)

(a,b)(ANRonly)

(RTP1) (RTP2)

Legend:

(a) SME Init Auth

(b) SME Sec Auth

(c) DSME Init Auth

12


Agenda

Introduction




Closing Remarks

13


SME And DSME Comparison - Parameter Data

SME Similar parameter data

Environment InformationFunction CodeRelated Session InformationExit User DataPLU & SLU (& ILU) InformationSession Correlator (PCID)OLU (& DLU) Adjacent SSCPADJSSCP Name List

Other parameter dataSession Management User DataExit Services Parmlist (For Msgs)OLU (& DLU) Gateway NCPSession User DataSession Authorization (CV x'59')TCP/IP Information (CV x'64')

DSME Similar parameter data

Environment InformationFunction CodeRelated Search InformationExit User DataOLU & DLU InformationSearch Correlator (PCID & Modifier)OLU Adjacent CPSubnetwork Routing List (SRL)ICN List (V1R8 and above)

Other parameter dataDSME User Data (User Supplied Parameter List)Search Task ListApplication GDS Variable

Copy of Cdinit, InitOtherCD or NotifyOnly if requested during Begin

14


SME And DSME - Environment Information

SMENetwork Identifier (NETID=)

SSCP Name (SSCPNAME=)

Host PU Name

OLU Adjacent NETID

DLU Adjacent NETID

VTAM Release

DSMENetwork Identifier (NETID=)

CP Name (SSCPNAME=)

Node CharacteristicsNN, EN, ICN, CDS, EBN

15


SME And DSME - Related Information

SME - Session InformationXRF Backup

Autologon, PLU-Init, SLU-Init or 3rd-Party-Init

DLU Network ID Assumed

Invoked For CDINIT, DSRLST Or InitOtherCD (Request or Response)

SME Driven For Takeover Session, MNPS Recovery Session

SSCP Node RoleILU, OLU, DLU or INN

Resource Discovery Search (RDS)

CP-CP Session

Surprise Session From DLUR SLU

VTAM Exit Services Available

DSME - Search InformationDLU Name Authenticity (Alias/Real, Generic/Real, Name Change Support)

APAR OA12411 (V1R7) allows DSME to convert non-authentic NETIDs to authentic NETIDs

CP's Node RoleCP and/or NNS of OLU and/or DLUODS, ADS, ICN and/or INN

Search OriginFrom subareaOver an intersubnetwork link (ISL)From an EN, NN or EBN

Resource Discovery Search (RDS)

SLU-Init Scout Search

Application GDS VariableFlags indicating Cdinit, InitOtherCD, Notify or none

16


SME And DSME - Resource (LU) Information

SME - PLU, SLU, ILU InfoSSCP Visit Count

Flags (Name Translation, Target LU, Uservar type)

Owning SSCP Name

LU Real NETID And Name

LU Alias NETID And Name

LU Network AddressesNative, OLU and/or DLU networks

LU Hierarchy (RDTE Structure)

LU Tables (Interpret, Logmode, USS)

LU Associated ResourcesOwning And/Or Adjacent CPs

LU Adjacent Link Station Is ISL

DSME - OLU, DLU Info

Directory Database Hierarchy

Network-Qualified LU Name

Network-Qualified CP Name

Network-Qualified NNS Name

17


Agenda

Introduction




Closing Remarks

18


SME - Return codes

Initial Authorizationx'00' - Session authorized (completely); Secondary Authorization not requiredx'04' - Session authorized (for now); Secondary Authorization requiredx'06' - Session authorized (completely); Secondary Authorization required only if session establishment failsx'08' - Session not authorized; fail session; do not allow reroutingx'0C' - Session not authorized; fail session; allow rerouting by sending SSCPother - Invalid return code; session fails (treated like x'08')

Secondary Authorizationx'00' - Session authorized (completely)x'08' - Session not authorized; fail session; do not allow reroutingother - Invalid return code; session fails (treated like x'08')

Adjacent SSCP Selectionx'00' - Use SSCP Name List provided by exit routine (modified or not)x'04' - Use original SSCP Name List provided by VTAMx'08' - Session not authorized; fail session; do not allow reroutingx'0C' - Session not authorized; fail session; allow rerouting by sending SSCPother - Invalid return code; use original SSCP Name List (treated like x'04')

19


DSME - Return codes

Initial Authorization (see table in z/OS CommServer SNA Customization)x'00' - Search authorized; allow all APPN searchingx'04' - Search not authorized; search fails; allow rerouting by sending CPx'08' - Search authorized; allow search of served ENs onlyx'0C' - Search authorized; allow search of served ENs & subarea through this ICN onlyx'10' - Search authorized; allow all APPN searching except subarea through this ICNx'14' - Search authorized; allow all APPN searching except subarea through other ICNsx'18' - Search authorized; allow all APPN searching except subarea through any ICNx'1C' - Search authorized; allow search of served ENs & subarea through any ICN onlyx'20' - Search authorized; allow directed searches only (no trial-and-error searching)x'24' - Search authorized; use Search Task List provided by exit (modified or not)x'28' - Reject directed search on redrive of Initial Authorization; continue searchingother - Invalid return code; search fails; allow rerouting by sending CP (treated like x'04')

Border Node Selection and Interchange Node Selectionx'00' - Use SRL or ICN List provided by exit (modified or not)x'04' - Use original SRL or ICN List provided by VTAMx'08' - EBN or ICN Searching not allowed; search fails; allow rerouting by sending CPother - Invalid return code; use original SRL or ICN List (treated like x'04')

20


Agenda

Introduction




Closing Remarks

21


BNDYN=NONE Versus DSMEIf I am already using BNDYN=NONE and customized ADJCLUST tables to eliminate unwanted APPN searching, why might I also need a Directory Services Management Exit (DSME)?

BNDYN=NONE allows you to control when searches are sent from your network into adjacent subnetworksBut BNDYN=NONE does NOT control when searches from adjacent subnetworks are sent into your network!DSME allows you to control how much searching is performed for ALL searches

Allows other information to be used as validation criteria (like OLU name/netid, real versus alias target LU name, adjacent CP name/netid in the OLU direction, etc.)

Many Customers May No Longer Need a DSME!!!z/OS CS V1R8: ALIASRCH=YES or NO On ADJCPs: Allows customers to control (on an adjacent non-native node basis) whether ALIAS searches are allowed to enter their network

Coming in z/OS CS V1R10: AUTHNETS=(NET1,NET2, ...) On ADJCPs: Allows customers to control (on an adjacent non-native node basis) what target LU NETID(s) are allowed on network-qualified searches entering their network

APPNNETA

EBNA1

APPNNETB

EBNB1

EBNB2

APPNNETC

EBNC1

Trusted Untrusted

************************************************************* Adjacent CP Major Node for NETA.A1 ************************************************************** ADJCPA1 VBUILD TYPE=ADJCP B1 ADJCP NETID=NETB,ALIASRCH=NO,AUTHNETS=NETAB2 ADJCP NETID=NETB,ALIASRCH=NO,AUTHNETS=(NETA,NETC)C1 ADJCP NETID=NETC,ALIASRCH=YESD1 ADJCP NETID=NETD,ALIASRCH=NO,AUTHNETS=

22


Did You Know That:

SMEs And DSMEs Can Be Replaced Non-Disruptively?SMEs and DSMEs can choose to be called before and/or after they are replaced.

Using SMEs And DSMEs Does Not Requires Much CPU?Assuming that exit routines are well written and well behaved

A sample skeleton DSME is now available on the internet?

Little Known Facts About SMEs And DSMEs

http://www.ibm.com/support/docview.wss?rs=852&context=SSSN3L&dc=D400&uid=swg24014056&loc=en_US&cs=utf-8&lang=en

23


For More Information...

URL Contenthttp://www.ibm.com/systems/z/ IBM System z

http://www.ibm.com/systems/z/hardware/networking/index.html IBM System z Networking

http://www.ibm.com/software/network/commserver/zos/ IBM z/OS Communications Server

http://www.ibm.com/software/network/commserver/z_lin/ IBM Communications Server for Linux on zSeries

http://www.ibm.com/software/network/ccl/ IBM Communication Controller for Linux on System z

http://www.ibm.com/software/network/commserver/library IBM Communications Server Library - white papers, product documentation, etc.

http://www.redbooks.ibm.com IBM Redbooks

http://www.ibm.com/software/network/commserver/support IBM Communications Server Technical Support

http://www.ibm.com/support/techdocs/ Technical Support Documentation (techdocs, flashes, presentations, white papers, etc.)

http://www.rfc-editor.org/rfcsearch.html Request For Comments (RFCs)

http://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/index.jsp IBM Education Assistant

24

sme versus dsme: a comparison - ibm

Documents