Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The following table categorizes the configuration options into logical areas of application. Each Category name is a link to a table of options in that category. Each Option Name in those tables is a link to detailed information about that option.

Category

Description

Certificates

X.509 certificate related options.

Command

Command or script to execute on the remote system. If a script is being executed, the script may reside on the local host on which the Manager is running or the remote host on which the Server is running.

It also includes options to control the process environment in which the command executes.

Events

Options used to define event generation.

Installation

Options that specify installation requirements, such as directory locations.

Local

Options required for local broker registration.

Messages

Universal Command message options.

Miscellaneous

Options use to display command help and program versions.

Network

Processing options for all the data transferred between the remote and local systems.

Options

Alternative methods to specify command options.

Remote

Network address of the remote system and connection options.

Standard File

Processing options for the standard files transferred between the remote and local systems.

The STDFILE options are specified differently then the other options. There are three types of standard files: stderr, stdin, and stdout. Each standard file can have a different set of options applied. In order to distinguish between the standard files, the options must start with a standard file specification option (STDERR_SPEC, STDIN_SPEC, or STDOUT_SPEC). The standard file options (names starting with SIO_) follow the standard file specification option.

User

User account the command executes with on the remote system.

Certificate Category Options

Option Name

Description

CA_CERTIFICATES

Location of PEM-formatted trusted CA X.509 certificates

CERTIFICATE

Location of Manager's PEM-formatted X.509 certificate.

CERTIFICATE_EXPIRATION_NOTICE

Number of days prior to certificate expiration to begin issuing informational messages about the expiration.

CERTIFICATE_REVOCATION_LIST

Location of Manager's PEM-formatted CRL.

PRIVATE_KEY

Location of Manager's PEM-formatted RSA private key.

PRIVATE_KEY_PWD

Password for the Manager's PRIVATE_KEY.

VERIFY_HOST_NAME

Specification for whether or not the Broker's X.509 certificate host name field must be verified.

VERIFY_SERIAL_NUMBER

Specification for whether or not the Broker's X.509 certificate serial number field must be verified.

Command Category Options

Option Name

Description

COMMAND

Remote command to execute.

COMMAND_ID

Unique command ID associated the unit of work.

COMMAND_TYPE

Type of command specified with option COMMAND.

EXIT_CODE_MAP

Allows exit codes from the user process executed by UCMD Server to be translated (mapped) to a corresponding exit code for UCMD Manager.

LOGIN

Specification for whether or not the command runs in a login environment.

MANAGER_FAULT_TOLERANT

Specification for whether or not manager fault tolerance is used.

SCRIPT_FILE

Local script file to execute on the remote system.

SCRIPT_OPTIONS

Command line options passed to the script file.

SCRIPT_TYPE

Type of script file specified by option SCRIPT_FILE.

Events Category Options

Option Name

Description

ACTIVITY_MONITORING

Specification for whether or not product activity monitoring events are generated.

EVENT_GENERATION

Events to be generated as persistent events.

Installation Category Options

Option Name

Description

INSTALLATION_DIRECTORY

Directory in which UCMD Manager is installed.

Local Category Options

Option Name

Description

BIF_DIRECTORY

Broker Interface File (BIF) directory where the Universal Broker interface file is located.

PLF_DIRECTORY

Program Lock File (PLF) directory where the program lock files are located.

Messages Category Options

Option Name

Description

MESSAGE_LANGUAGE

Language of messages written.

MESSAGE_LEVEL

Level of messages written.

MSG_SUPPRESSION_LIST

List of message IDs representing Universal messages to be suppressed.

NLS_ DIRECTORY

Location of UMC and UTT files

TRACE_FILE_LINES

Maximum number of lines written to a trace file before it wraps around.

TRACE_TABLE

Memory trace table specification.

Miscellaneous Category Options

Option Name

Description

COMMENT

User-defined string.

HELP

Write command option help.

VERSION

Write program version.

Network Category Options

Option Name

Description

CODE_PAGE

Code page used for text translation.

CTL_SSL_CIPHER_LIST

SSL/TLS cipher list for the control session.

DATA_AUTHENTICATION

Specification for whether or not data integrity checks are performed on all standard I/O files.

DATA_COMPRESSION

Specification for whether or not data is compressed on all standard I/O files.

DATA_ENCRYPTION

Specification for whether or not data is encrypted on all standard I/O files.

DATA_SSL_CIPHER_LIST

SSL/TLS cipher list for the data sessions.

DEFAULT_CIPHER

Default SSL/TLS cipher used for data sessions.

FORCE_COMPLETE

Forces a manager fault tolerant server in a PENDING communication state to COMPLETED state without retrieving the spooled data.

JOB_RETENTION

Length of time that a Server waits for a reconnect after the user process completes.

MIN_SSL_PROTOCOL

Minimum SSL/TLS protocol level that will be negotiated and used for communications channels.

NETWORK_DELAY

Maximum number of seconds considered acceptable to wait for data communications.

NETWORK_FAULT_TOLERANT

Specification for whether or not the network fault tolerant protocol is used.

RECONNECT_RETRY_COUNT

Maximum number of network fault tolerant reconnect attempts.

RECONNECT_RETRY_INTERVAL

Number of seconds between network fault tolerant reconnect attempts.

RESTART

Specification for whether or not the manager is requesting restart.

Options Category Options

Option Name

Description

ASSIGN_PROCESS_TO_JOB

Specification for whether or not UCMD Server assigns child processes to a single Windows job object.

COMMAND_FILE_ENCRYPTED

Encrypted command file.

COMMAND_FILE_PLAIN

Plain text command file.

ELEVATE_USER_TOKEN

Overrides the UCMD Server ELEVATE_USER_TOKEN configuration option that determines whether a Windows process executes with highest available privileges. This option allows a process to obtain a user access token that is not subject to User Account Control (UAC) restrictions.

ENCRYPTION_KEY

Encryption key used to decrypt an encrypted command file specified by option COMMAND_FILE_ENCRYPTED.

SERVER_OPTIONS

UCMD Server options that can be overridden by UCMD Managers.

UENCRYPTED_CODEPAGE

Character code page that Universal Command Manager uses to translate characters within a command file that has been encrypted with the Universal Encrypt utility.

UENCRYPTED_CODEPAGE_PATH

Location of the code page specified by the UENCRYPTED_CODEPAGE option.

Remote Category Options

Option Name

Description

CONNECT_RETRY_COUNT

Number of times a UCMD Manager will attempt to establish a connection with a remote Universal Broker.

CONNECT_RETRY_INTERVAL

Number of seconds between failed attempts to establish a connection with a remote Universal Broker.

CONNECT_TIMEOUT

Amount of time that a UCMD Manager will wait for a connection to a remote Universal Broker to complete.

DNS_EXPAND

Number of IP addresses returned to UCMD Manager following a DNS query issued to resolve a host name.

HOST_SELECTION

Host in the REMOTE_HOST list that the UCMD Manager will choose to begin its attempts to connect to a remote Universal Broker.

HOSTNAME_RETRY_COUNT

Number of times that UCMD will attempt to resolve the host name of a specified Universal Broker before it ends with a connect error.

MFT_SAFE_MODE

Situations in which more than one host may be specified in the REMOTE_HOST list when manager fault tolerance (MFT) is enabled.

OUTBOUND_IP

Host or IP address to use for all outgoing IP connections.

REMOTE_HOST

List of one or more hosts upon which a command may run.

REMOTE_PORT

TCP/IP port number of the remote Broker.

Standard File Category Options

Option Name

Description

SIO_DATA_AUTHENTICATION

Specification for whether or not data integrity checks are performed on a standard file.

SIO_DATA_COMPRESSION

Specification for whether or not data is compressed on a standard file (and if so, how).

SIO_DATA_ENCRYPTION

Specification for whether or not data is encrypted on a standard file.

SIO_LOCAL_CODE_PAGE

Code page used for local text translation on a standard file.

SIO_LOCAL_FILE

Local file used for a standard file instead of the default.

SIO_MODE

Translation mode of a standard file.

SIO_REMOTE_CODE_PAGE

Code page used for remote text translation on a standard file.

STDERR_FILE_SPEC

Start of standard error file specification options.

STDIN_FILE_SPEC

Start of standard input file specification options.

STDOUT_FILE_SPEC

Start of standard output file specification options.

User Category Options

Option Name

Description

USER_ID

User ID or account with which to execute the remote command.

USER_PASSWORD

Password associated with USER_ID.

...

The following figure illustrates the command line syntax – using the command line, long form of the configuration options – of UCMD Manager for UNIX.


<pre>
ucmd
{ 
-cmd
<i>command</i>
 command [
-cmd_type
 {
<b>cmdref</b>|<b>shell</b>|<b>stc</b>
cmdref|shell|stc} ] | 
-script
<i>file</i>
 file
  [
-options
<i>options</i>
 options] [
-script_type
<i>type</i>]
 type] }
[
-host
<i>hostlist</i>
 hostlist
[
-connect_retry_count
<i>number</i>
 number]
[
-connect_retry_interval
<i>seconds</i>
 seconds]
[
-connect_timeout
<i>seconds</i>
 seconds]
[
-dns_expand
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-host_selection
 {
<b>sequential</b>|<b>random</b>
sequential|random} ]
[
-mft_safe_mode
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-file
<i>file</i>
 file | 
-encryptedfile
<i>file</i>
 ddname [
-key
<i>key</i>
 key] ]  *
[
-port
<i>port</i>
 port]
[
-userid
<i>user</i>
 user [
-pwd
<i>pwd</i>
 pwd] ]
[
-hostname_retry_count
<i>count</i>
 count]
[
-outboundip
Panel
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
Html bobswift
 <i>host</i>]
[
 host]
[-bif_directory directory
Html bobswift
 
<i>directory</i>
]

[
-plf_directory
Html bobswift <i>directory</i>
 directory ]
[
-server
Html bobswift <i>options</i>
 options]
[
-uencrypted_codepage
Html bobswift
 <i>codepage</i>]
[
 codepage]
[-uencrypted_codepage_path
Html bobswift <i>codepage</i>
 codepage]
[
-elevate_user_token
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-assign_process_to_job
Html bobswift <i>option</i>
 option]
[
-managerft
Html bobswift {<b>yes</b>|<b>no</b>
 {yes|no} ]
[
-cmdid
Html bobswift <i>id</i>
 id]
[
-login
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-lang
Html bobswift <i>language</i>
 language ]
[
-level
Html bobswift
 {
<b>trace</b>|<b>audit</b>|<b>info</b>|<b>warn</b>|<b>error</b>
trace|audit|info|warn|error}[,{
<b>time</b>|<b>notime</b>
time|notime} ]
[
-msg_suppression_list
Html bobswift <i>list</i>
 list ]
[
-tracefilelines
Html bobswift <i>lines</i>
 lines]
[
-trace_table
Html bobswift <i>size</i>,{<b>error</b>|<b>always</b>|<b>never</b>
 size,{error|always|never} ]
[-ssl_implementation {openssl|system} ]
[
-ca_certs
Html bobswift <i>file</i>
 file [
-verify_host_name
Html bobswift
 {
<b>yes</b>|<b>no</b>|<b>hostname</b>
yes|no|hostname} ] 
   [
-verify_serial_number
Html bobswift <i>number</i>
 number] ]
[
-cert
Html bobswift
 <i>file</i> 
 file -private_key
Html bobswift <i>ddname</i>
 ddname [
-private_key_pwd
Html bobswift <i>password</i>
 password] ]
[
-days
Html bobswift <i>number</i>

-crl

Html bobswift <i>file</i>
 number]
[
-crl file]
[
-ctl_ssl_cipher_list
Html bobswift <i>cipherlist</i>
 cipherlist]
[
-data_ssl_cipher_list
Html bobswift <i>cipherlist</i>
 cipherlist]
[
-default_cipher
Html bobswift <i>cipher</i>
 cipher]
[
-forcecomplete
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-job_retention
Html bobswift
 <i>seconds</i>]
[

-delay

Html bobswift <i>seconds</i>
 seconds]
[-delay seconds] [
-min_ssl_protocol
Html bobswift <i>option</i>
 option]
[
-networkft
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-retry_count
Html bobswift <i>number</i>
 number]
[
-retry_interval
Html bobswift <i>seconds</i>
 seconds]
[
-restart
Html bobswift
 {
<b>yes</b>|<b>no</b>|<b>auto</b>
yes|no|auto} [
-managerft
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} [
-cmdid
Html bobswift <i>id</i>
 id] ] ]
[
-codepage
Html bobswift <i>codepage</i>
 codepage]
[
-compress
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no}[,{
<b>zlib</b>|<b>hasp</b>
zlib|hasp} ] ]
[
-encrypt
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-authenticate
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
[
-stdin
Html bobswift
 | 
-stdout
Html bobswift
 | 
-stderr
Html bobswift
]
   [
-codepage
Html bobswift <i>codepage</i>
 codepage]
   [

-compress

Html bobswift
-compress {
<b>yes</b>|<b>no</b>
yes|no}[,{
<b>zlib</b>|<b>hasp</b>
zlib|hasp} ] ]
   [
-encrypt
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
   [
-authenticate
Html bobswift
 {
<b>yes</b>|<b>no</b>
yes|no} ]
   [
-localfile
Html bobswift <i>ddname</i>
 ddname]
   [
-mode
Html bobswift
 {
<b>text</b>|<b>binary</b>
text|binary}[,{
<b>ucs</b>|<b>direct</b>
ucs|direct} ] 
   [
-remotecodepage
Html bobswift <i>codepage</i>
 codepage]
[
-exit_code_map
Html bobswift <i>map</i>
 map]
[
-comment
Html bobswift <i>text</i>
 text]

ucmd
{ 
-help
Html bobswift
 | 
-version
Html bobswift
 }
</pre>



* The command file (-file or -encryptedfile) can contain some or all required and/or optional configuration options, including -cmd (or -script) and -host.
If a command file is specified on the command line, and it contains the required -cmd (or -script) and -host options, those options do not have to be specified additionally on the command line.