Previous ION Java User's Guide: Configuring ION Java Next

Configuring ION Java for UNIX

This section covers the following topics:

Starting the ION Daemon on UNIX

Start the ION Daemon process by executing the iond command at the shell prompt. The iond command uses the following syntax:

iond [-exfile=filename] [-infile=filename] [-excomm="routine0, routine1, ...routinen"] [-incomm="routine0, routine1, ...routinen"] [-http] [-httplog=filename] [-httpport=port] [-httptimeout=minutes] [-maxconn=connections] [-port=port] [-rutil] [-security="device, df, filein, fileout, fileio, linking, none, os"] [-timeout=seconds]


Note
You must execute the ion_setup script before starting the ION Daemon. For more information, see the Installation and Licensing Guide.

The following command line parameters are accepted by the ION Daemon:

-exfile

Set this switch to the name of a file that contains a list of IDL commands (procedure or function names) that the server should not accept. Any command that attempts to execute one of the listed routines will be rejected. The file should contain one routine name on each line. Blank lines and lines that begin with the "#" character are ignored.

Specifying an exclude file will not alter the list of routines rejected as a result of the setting of the -security switch.

-infile

Set this switch to the name of a file that contains a list of IDL commands (procedure or function names) that the server should accept. Any command that attempts to execute a routine that is not in the list will be rejected. The file should contain one routine name on each line. Blank lines and lines that begin with the "#" character are ignored.

Specifying an include file will not alter the list of routines rejected as a result of the setting of the security switch.


Note
If a routine is excluded (either via an exclude file, a list of excluded routines, or via the -security switch), it will be rejected even if that routine is also included in an include file or list.

-excomm

Set this switch to a comma-separated list of IDL commands (procedure or function names) to add to the exclusion list. This switch works in the same way as the
-exfile switch; it is provided as a convenience.

Specifying a list of routines to exclude will not alter the list of routines rejected as a result of the setting of the -security switch.

-incomm

Set this switch to a comma-separated list of IDL commands (procedure or function names) to add to the inclusion list. This switch works in the same way as the
-infile switch; it is provided as a convenience.

Specifying a list of routines to include will not alter the list of routines rejected as a result of the setting of the -security switch.


Note
If a routine is excluded (either via an exclude file, a list of excluded routines, or via the -security switch), it will be rejected even if that routine is also included in an include file or list.

-maxconn

Set this switch to the maximum number of connections that can be active at once. If you do not specify a value for the -maxconn switch, the maximum number of connections will be equal to the number of IDL licenses you have available.

-port

Set this switch to the port number that the ION Daemon should watch for connection requests. If you do not specify a value for the -port switch, the ION Daemon watches port 7085.

-rutil

Set this switch to allow the utility routines iondown and ionstat to be run from any host. By default, connections from these routines are allowed only if the routines are run on the same host as the ION Daemon.

-security

Set this switch to a comma-separated list of tokens that define a list of IDL routines. IDL routines specified via a token in the security list will not be passed through to the IDL session by the ION Server.

If you do not include the security switch when starting the ION Daemon, the following default tokens are set:

fileio, os, linking, device, df  

If you include the -security switch when starting the ION Daemon, only the tokens you specify are set. See the discussion of the -infile, -exfile, -incomm, and
-excomm switches for further information on specifying which IDL commands will be accepted by daemon.

The -security switch accepts the following tokens. (In the lists below, the asterisk is used to represent all IDL routines of a given type.)

Table 1-5: Active Security Group Tokens 

Table 1-5: Active Security Group Tokens 
Token
Description
df
Disables all Scientific Data Format routines (CDF_*, EOS_*, HDF_*, NCDF_*).
device
Disables changing devices using the SET_PLOT routine.
filein
Disables file input operations by disallowing use of the following routines: GET_KBRD, OPENR, READ, READF, READU, READ_*
fileout
Disables file output operations by disallowing use of the following routines: OPENW, PRINTF, WRITEU, WRITE_*
fileio
Disables file input and output operations by disallowing use of the following routines: ASSOC, CLOSE, EOF, FILEPATH, FLUSH, FSTAT, GET_LUN, IOCTL, OPENU, POINT_LUN
linking
Disables calls from IDL to external code by disallowing use of the following routines: CALL_EXTERNAL, LINKIMAGE
none
No security checking is provided.
os
Disables operating system access by disallowing use of the following routines: CD, CALL_FUNCTION, CALL_METHOD, CALL_PROCEDURE, DEFINE_KEY, DELETE_SYMBOL, DELLOG, EXECUTE, FILEPATH, FINDFILE, GETENV, POPD, PRINTD, PUSHD, SETENV, SPAWN

-timeout

Set this switch to the number of seconds ION will wait to receive a response. If no response is received within the timeout interval, ION will make a second attempt (it will "ping" the remote machine). If no response is received within the second timeout interval, ION will close the connection.

The default timeout value is 60 seconds. You may wish to increase the timeout value with extremely slow network connections.

Starting the ION Daemon at Boot Time

You can automatically start the ION daemon by adding the command ITT_DIR/ion64/ion_java/bin/iond to your system startup script, or by installing and configuring the sys5_iond boot time startup script, as described below:


Note
The following instructions may differ for your platform. For additional information, refer to your host operating system documentation or the man pages for init, rc0, rc2, and rc3.

Checking the Status of the ION Daemon

Use the ionstat utility to determine the current status of the ION Daemon. The status report includes the start time of the daemon and information about clients currently connected to the ION Server.

The ionstat command uses the following syntax:

ionstat [-host=hostname] [-port=port]  

The switches to the ionstat command are described below:

-host

Set this switch to the name of the host on which the ION Daemon is running. Unless the -rutil switch was set when the ION Daemon was started, ionstat requests are only accepted from the host on which the daemon is running.

-port

Set this switch to the port number of the port on which the ION Daemon is listening. The default is port 7085, which is the default port for the ION Daemon.

Shutting Down the ION Daemon

Use the iondown utility to shut down the ION Daemon. The iondown command uses the following syntax:

iondown [-force] [-host=hostname] [-port=port]  

 


Note
Under Windows, you will generally use the ION service rather than starting and stopping the ION Daemon manually. However, if you used the iond command to start the ION Daemon on your machine, you can use the iondown command to stop it.

The switches to the iondown command are described below:

-force

Set this switch to force the ION Daemon to shut down without prompting. If -force is not specified, iondown will prompt you before shutting down the daemon.

-host

Set this switch to the name of the host on which the ION Daemon is running. Unless the -rutil switch was set when the ION Daemon was started, iondown requests are only accepted from the host on which the daemon is running.

-port

Set this switch to the port number of the port that the ION Daemon is watching. The default is port 7085, which is the default port for the ION Daemon.

  IDL Online Help (March 06, 2007)