Operating Systems

Why Session Managers Still Matter

2 Pages
  • Inbound and outbound datastream compression
  • The ability to maintain persistent sessions across device disconnect/reconnects (so-called “portability” to take over active sessions)
  • LOGMODE mismatch toleration
  • The ability to map the virtual terminals presented to applications to physical terminals or IP addresses of end users.  

A particularly useful feature of session managers is their ability to programmatically navigate “virtual sessions”; that is, the sessions they maintain between the address space and the target applications on behalf of users. Most session managers permit users to code (or record) scripts to automatically logon to an application and cleanly log-off from applications. Advanced session managers permit scripts to be launched with a hotkey or trigger to populate fields on a virtual session from either a static file or another application; for instance, an order entry user might automatically query an inventory application simply by invoking a hotkey. Depending on the richness of the session manager, much more is possible. 

Features of a Robust Session Manager  

The hallmark of zSeries is its resilience. Applications running on that platform should do nothing to compromise reliability. A well-architected session manager supports perhaps thousands of users and tens of thousands of virtual sessions; it runs on multiple MVS Task Control Blocks (TCBs) and minimizes the number of interrupts by, for example, managing its own storage and resource serialization. Because many enterprises distribute the workload across multiple address spaces and Logical Partitions (LPARs) to either load balance or assure higher availability, most session managers are enabled for VTAM generic resource support and provide inter-address space communication. 

Serviceability of the host portal is critical. To help with the administration of users, session management products typically offer real-time profile update functionality, often permitting users to be defined to groups, as well, to facilitate managing the logistics of so many users. 

Comprehensive solutions also include a help desk-type feature offering capabilities such as user cancel, peek, record/play and conferencing of user sessions, broadcast messaging, user profile reporting, and resource monitoring with the ability to dynamically reconfigure run-time options and update scripts. Additionally, most session managers generate statistical and diagnostic information such as application and internal trace data and response time metrics. 

Security features found in robust offerings include:

  • Command validation (e.g., controlling which users can issue MVS or VTAM commands through the product, who can shutdown, etc.)
  • Inactivity detection and lock screens to prevent unauthorized use of an idle session
  • PassTicket support, password encryption, and mixed-case support where a password is maintained by the session manager
  • Accounting and auditing metrics (SMF data, report of current and disconnected user activity).  

Application integration and development features include: 

  • Virtual session tools (screen scraping and navigation functions)
  • Full scripting syntax with string manipulation
  • Arithmetic operations, parameter, and variable support
  • PDS, VSAM, and sequential data set access
  • Subroutine support.

For those sites not yet using host transformation tools such as IBM WebSphere Host Access Transformation Services (HATS), session managers provide GUI functions such as pop-up windows, pull-down menus, and help systems to add a new face to host applications. “Section 508”-compliant session managers can make host applications more accessible, too. Additionally, National Language Support (NLS) permits sites to localize a host application to better serve users. 

Other advanced features often found in best-of-breed session managers include expanded communication (IBM Session Manager, for example, can access TCP/IP applications and CL/ SUPERSESSION provides an LU0 interface), advanced messaging and mail, background session notification, automation interfacing, printer management, specialized CICS or IMS support, an assembler or COBOL interface, and internal reader access. 

Not all session managers provide all the functionality described here; organizations should weigh available features based on their own requirements to determine which solution best addresses their needs. Subjective qualities such as product stability, performance, and vendor support also should be evaluated. 

Beyond Session Management  

Additional value can be realized by leveraging the technology beyond simple multi-session management. 

During the infamous Year 2000 crisis, for example, organizations used session manager technology and pivot year logic with the session manager acting as the intermediary to provide a compliant solution to a legacy problem. Others found relief from the subsequent euro crisis using the technology to add a new face to older applications, facilitating triangulation with underlying virtual sessions. In both cases, these quick solutions addressed a problem encountered even today: limited resources, absence of legacy skills, and lost source. Today, users may exploit the same technology to envelope a host application and enable it for the Service-Oriented Architecture (SOA). 

Other creative uses include testing and task scheduling. Because they can accept or create thousands of connections, and can perform screen navigation, session managers can be used to simulate application interaction or workload. Because they’re typically continuously available makes them a critical part in an enterprise’s automation and task scheduling strategy. Some session managers have direct interfaces to automation applications; others, themselves, can facilitate this functionality. 

Session Managers Still Matter  

Through the years and releases, session managers haven’t lost their utility and continue to address critical business imperatives by providing centralized access and host-level security to applications and enterprise data. That relevance is further sustained by IBM’s commitment to the mainframe, which protects enterprise investment in host applications by aspiring to, as IBM’s Richard Szulewski, zSeries Market Strategist, says, “Make zSeries the most stable, most reliable platform on the planet!” 

As long as there’s a mainframe, there will be a need for a portal to its resources.

2 Pages