The stand-alone application server will be configured with:
${zAugmentingProductData}
The Profile Management Tool has created jobs based on the information you
provided. These instructions tell you how to modify the operating
system and run the jobs to customize WebSphere Application Server for z/OS.
When you upload the customization jobs to the target system, a text version of
these instructions will be written to:
The Profile Management Tool does not attempt to update configuration data for your base operating system or existing subsystems. You need to perform the following manual steps prior to running the WebSphere for z/OS configuration jobs.
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|
Add these datasets to your PROGxx or IEAAPFxx parmlib members, as
appropriate, ensuring you specify the correct volsers.
Note: You must add the actual data set names to your parmlib members and not any aliases you may have specified.
| Status of task | Date |
|---|---|
SUBSYS(STC,EXITS(IEFU29,IEFACTRT),INTERVAL(SMF,SYNC),TYPE(0,30,70:79,88,89,120,245))
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|
| Type | Number |
|---|---|
| SOAP JMX Connector port | ${zSoapPort} |
| ORB port | ${zOrbListenerPort} |
| ORB SSL port | ${zOrbListenerSslPort} |
| Administrative console port | ${zAdminConsolePort} |
| Administrative console secure port | ${zAdminConsoleSecurePort} |
| HTTP Transport port | ${zHttpTransportPort} |
| HTTPS Transport port | ${zHttpTransportSslPort} |
| High Availability Manager Communication port | ${zHighAvailManagerPort} |
| Service Integration port | ${zServiceIntegrationPort} |
| Service Integration Secure port | ${zServiceIntegrationSecurePort} |
| Service Integration MQ Interoperability port | ${zServiceIntegrationMqPort} |
| Service Integration MQ Interoperability Secure port | ${zServiceIntegrationSecureMqPort} |
| Session Initiation Protocol (SIP) port | ${zSessionInitiationPort} |
| Session Initiation Protocol (SIP) port | ${zSessionInitiationPort} |
| Session Initiation Protocol (SIP) secure port | ${zSessionInitiationSecurePort} |
| Daemon IP port | ${zDaemonPort} |
| Daemon SSL port | ${zDaemonSslPort} |
Add the contents of the cntl/bbotcpip file within this customization definition to the PORT section of the file referenced by the DD statement for the TCP/IP profile in the TCP/IP start procedure. Copy and paste from this file into the data set used by your installation.
Attention: If another application has already reserved any of these ports for its own use, you must resolve the resulting conflict before you continue. If you use the Profile Management Tool to update the port specifications, be sure to upload the updated customization jobs.
| Status of task | Date |
|---|---|
Check that no other copies of WebSphere Application server, from any release, reside in the link pack area or the system link list. Also, check that the target MVS system has at least 40MB of free storage in the extended CSA if SBBOLOAD is placed in the link pack area, or 8MB of free storage in extended CSA for the daemon and for each node (deployment manager node or application server node), if SBBOLOAD is placed in the link list.
Alternatively, you can place the following statement in a parmlib PROGxx member which is activated with the SET PROG=xx command after system IPL is complete:
Check that sure that the SBBOLOAD modules are loaded into LPA after each system IPL.
| Status of task | Date |
|---|---|
${zBboloadName}
${zBbgloadName}
${zBbolod2Name}
The following data sets will be placed in the STEPLIB concatenation
for the application server controller, controller adjunct and servant
regions, and in the setupCmdLine.sh script in the WebSphere Configuration
file system for the application server. You must not remove these STEPLIB
statements.
${zAppServerBboloadName}
${zAppServerBbgloadName}
${zAppServerBbolod2Name}
BBORTS61
The BBORTS61 module is used by WebSphere Application Server for component trace support. A copy of this module (any maintenance level) must be in the system link pack area in order for CTRACE to work correctly.
If a copy of BBORTS61 is currently loaded into LPA, no further action is required.
Otherwise, issue the following MVS console command to load BBORTS61 into dynamic LPA:
Alternatively, you can place the following statement in a parmlib PROGxx member, which is activated with the SET PROG=xx command after system IPL is complete:
Check that the BBORTS61 module is loaded into LPA after each system IPL.
| Status of task | Date |
|---|---|
See the Language Environment Customization manual and the System SSL Programming manual for your z/OS release for advice on placing members from the libraries into the system link pack area.
Placing these data sets in the link list insulates your WebSphere Application Server for z/OS configuration from changes in data set names (for example, when migrating to z/OS 1.6).
If the Language Environment or System SSL load module libraries are not in your system link list, you need to perform the following steps before starting any WebSphere Application Server for z/OS servers:
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|
The Profile Management Tool built a number of batch jobs with the variables you supplied. You need to run the jobs in the order listed below, using user IDs with the appropriate authority.
If the UNIXPRIV profile CHOWN.UNRESTRICTED is defined, then the SUPERUSER.FILESYS.CHOWN is not required. For information about the UNIXPRIV class, see the z/OS Unix System Services Planning book.
Before you begin: Complete the section above entitled "Manual configuration updates".| Type | Group/userid | GID/UID |
|---|---|---|
| Configuration group | ${zConfigurationGroup} | ${zConfigurationGroupGID} |
| Servant group | ${zServantGroup} | ${zServantGroupGID} |
| Local user group | ${zLocalUserGroup} | ${zLocalUserGroupGID} |
| File system owner user ID | ${zHFSOwnerUserID} | ${zHFSOwnerUID} |
Carefully review these definitions with your security administrator.
| Status of task | Date |
|---|---|
This job executes the RACF commands created by the previous job. If the group and user IDs named above have already been created during a previous WebSphere Application Server for z/OS configuration and are in all target system RACF databases, you do not need to rerun this job.
Result: You may receive errors, such as INVALID USER messages, from this job because a user ID, group or profile is already defined. Make sure the existing user ID, group, or profile has the same characteristics as the user ID, group, or profile being created by BBOSBRAK. If not, then change the values in the Profile Management Tool, which are causing the conflict. Then upload the updated customization jobs and restart the process.
When this step is complete, all groups and user IDs
listed above for job BBOSBRAJ should be defined in the
RACF database on each target system for the cell.
Note: The WebSphere Application Server owner user ID
${zHFSOwnerUserID} must have the WebSphere Application Server
configuration group ${zConfigurationGroup} as its
default OMVS group.
| Status of task | Date |
|---|---|
User ID requirement: File system update authority (see above).
This job creates home directories for WebSphere Application Server for z/OS user IDS. These home directories will be subdirectories of ${zUserIDHomeDirectory}
This job will create the following directories:
${zUserIDHomeDirectory}
ownership: (any)
permission bits: 755
${zUserIDHomeDirectory}/${zConfigurationGroup}
ownership: ${zHFSOwnerUserID}:${zConfigurationGroup}
permission bits: 770
${zUserIDHomeDirectory}/${zServantGroup}
ownership: ${zHFSOwnerUserID}:${zServantGroup}
permission bits: 770
${zUserIDHomeDirectory}/${zLocalUserGroup}
ownership: ${zHFSOwnerUserID}:${zLocalUserGroup}
permission bits: 770
This job should be run on each z/OS system that will host WebSphere Application Server nodes using these WebSphere Application Server for z/OS common groups and owner user ID. After execution, verify that the directories have been created with the correct permissions on each system.
If these directories already exist with the specified ownership and permission on a target system, then this job does not need to be run on that system.
Attention: If the directory ${zUserIDHomeDirectory} is used by applications other than WebSphere Application Server, make sure that the permissions set by BBOSBRAM (755) are appropriate, or change them manually. This directory must be world-readable for Websphere Application Server to run correctly.
| Status of task | Date |
|---|---|
User ID requirement: Update authority for data set SYS1.MSGENU and/or SYS1.MSGJPN.
Attention: This is optional unless you require message translation.
This job sets up MMS to translate messages for WebSphere Application Server for z/OS.
There are two steps to update SYS1.MSGENU and SYS1.MSGJPN. Remove the unneeded step and change the target libraries, if necessary.
| Status of task | Date |
|---|---|
User ID requirement: Authority to update data set
| Status of task | Date |
|---|---|
User ID requirement: RACF special authority.
| Status of task | Date |
|---|---|
The Application Server Controller user ID (${zControlUserid}) needs the ability to perform operations on started tasks belonging to WebSphere Application Server for z/OS.
The asynchronous administrator user ID, and any user ID used to run the federation job when the node agent is started automatically, need the authority to issue the MVS START command.
If you are currently controlling MVS console command authority with SAF OPERCMDS profiles, grant the following authorities as indicated, substituting your own profile names:
| Status of task | Date |
|---|---|
User ID requirement: File system update authority (see above), and the authority to allocate
| Status of task | Date |
|---|---|
User ID requirement: File system update authority (see above), and the authority to allocate
${zConfigHfsName}
| Status of task | Date |
|---|---|
User ID requirement: File system update authority (see above).
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|
User ID requirement: File system update authority (see above).
cd ${zConfigMountPoint}/${zWasServerDir}
./bin/bbowprof.sh -deleteAll
rm profileRegistry.xml
rm -R profiles
Then correct the problem that caused BBOWWPFA to fail and re-run the job.
| Status of task | Date |
|---|---|
User ID requirement: File system update authority (see above).
| Status of task | Date |
|---|---|
If the SCEERUN, SCEERUN2 and System SSL load module libraries are not in the system link list, add them to the STEPLIB DD concatenation in each of the following cataloged procedures in ${zProclibName}:
| Status of task | Date |
|---|---|
Make sure Resource Recovery Services (RRS) is active. (See the InfoCenter for setup instructions if necessary.) Look for the following console message to verify that RRS was successfully started:
Update WLM policy. If your system is busy, you may want to include a rule in your WLM policy that OMVS work for job ${zServerShortName} (such as the postinstaller step) is to run in a service class with a high service objective.
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|
| Status of task | Date |
|---|---|