Running ssh-broker-g3 as a Started Task

If ssh-broker-g3 is going to be run as a started task, you need to assign a user for running it.

Assign a user to the started task by defining the procedure in the STARTED class and entering the user ID in the STDATA segment, for example, for user SSHBRKR:
```
RDEFINE STARTED SSHBRKR.* STDATA(USER(SSHBRKR)GROUP(SYS1))
SETROPTS RACLIST(STARTED) REFRESH 
```
Create the USS home directory /u/SSHBRKR for the user. Under it, create the .ssh2 subdirectory for storing the remote server host keys (and optionally user keys and the user-specific ssh-broker-config.xml configuration file). Make the user the owner of these directories, for example:
```
# mkdir /u/SSHBRKR
# mkdir /u/SSHBRKR/.ssh2
# chown -R SSHBRKR /u/SSHBRKR
# chmod 700 /u/SSHBRKR/.ssh2
```

To run the Connection Broker as a started task, you can use the JCL procedure SSHBRKR from /opt/tectia/doc/zOS/SAMPLIB (shown below). The JCL must be installed in the procedure library.

Note

	Note
The directory `/tmp/ssh-``USER` (for example, `/tmp/ssh-SSHBRKR`) should be owned by the `USER` and its permission bits should be set to 700. The files `/tmp/ssh-``USER``/ssh-broker` and `/tmp/ssh-``USER``/ssh-broker-aa` should be owned by the `USER` and their permission bits should be set to 600. These permissions are normally set automatically when ssh-broker-g3 is run for the first time and they should not be changed.

The directory /tmp/ssh-USER (for example, /tmp/ssh-SSHBRKR) should be owned by the USER and its permission bits should be set to 700. The files /tmp/ssh-USER/ssh-broker and /tmp/ssh-USER/ssh-broker-aa should be owned by the USER and their permission bits should be set to 600. These permissions are normally set automatically when ssh-broker-g3 is run for the first time and they should not be changed.

SSHBRKR:

//SSHBRKR PROC F=START,OPTS='',WTORCS='1,11'
//TECTIABR EXEC PGM=BPXBATSL,
//             REGION=0M,
//             TIME=NOLIMIT,
//             PARM=('PGM /opt/tectia/etc/init.d/ssh-broker-g3
//             &F foreground &WTORCS &OPTS')
//STDENV   DD  DSN=&SYSUID..SSZ.SRVR63.PARMLIB(SSHENV),
//             DISP=SHR
//STDOUT   DD  SYSOUT=*
//*STDERR   DD  SYSOUT=*
//STDIN    DD  DUMMY
//         PEND

Start the Connection Broker with the following operator command:

== > s sshbrkr

As an OPTS parameter, you can give parameters that the actual binary accepts, such as -D 2. For example:

== > S SSHBRKR,OPTS='-D 2'