(Oops. This reply went to the wrong thread.) We have never defined any installation userids on any SE. The only users defined are the standard IBM supplied one. Are you saying, if we defined at least a few of our own, we could have multiple 'sysprogs' logged on simultaneously?
. . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW robin...@sce.com -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of R.S. Sent: Thursday, May 28, 2020 9:25 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: HMC in Service Mode, IPL Question CAUTION EXTERNAL EMAIL I think you mean user like SooSysprog. Soo means Single Object Operations. This is complex issue, and it is fixed in 2.15 (z15 machines) - I know that from guy who is part of HMC/SE development team. Regarding z14 and older HMC levels the devil is in user table. 1. Some people do not define users and use pre-defined one like SYSPROG, OPER, SERVICE, etc. Sometimes even with default passwords. ;-) It's not worth further investigation. 2. Some people use LDAP, let's ignore it for clarity. 3. Some people do define custom userids, preferably each person has its own userid. However there is some "gotcha" here. You define users in HMC. HMC, but not SE. SE has still its own, predefined set of users. What happens when user JOHN1 defined as clone of SYSPROG logs on HMC? He is JOHN1. What about single object operations? Well, SE doesn not know JOHN1. However SE knows and trust HMC. In that case JOHN1 will be mapped to SooSYSPROG, which is SYSPROG equivalent. So, JOHN1 may manage SE. My recommendation is to repeat user definition on each SE and HMC in your shop. Of course there is no requirement all users have to be equally defined. However the above ...has no meaning for your issue. Why? Because of locked resource. SE object is busy and that's why any other person cannot perform SOO. The same apply for for many other objects in SE and HMC. Regarding Service Mode - I see no cons against IPL during this time. Note, IPL has very little to do with SE. Yes, SE initiate IPL process, but it is very limited. -- Radoslaw Skorupka Lodz, Poland W dniu 28.05.2020 o 17:33, Jesse 1 Robinson pisze: > We have remote access to HMC/SE. We can perform most actions remotely, > but in one area we're stuck--unless something has changed. Only one > individual can log on to an SE at one time because the userid > generated is SOOxxx based on the function being exercised. When that > userid is logged on, subsequent accesses to the SE are denied. If an > SE/CEC has been left in Service Mode by a remote user, I'm not sure > how one would get int to turn it off. (Now that I think about it, that > action may be disallowed.) > > I am curious about the original question: re-IPL while in Service Mode. > Whether it's a good idea, is it even possible? > > . > . > J.O.Skip Robinson > Southern California Edison Company > Electric Dragon Team Paddler > SHARE MVS Program Co-Manager > 323-715-0595 Mobile > 626-543-6132 Office ⇐=== NEW > robin...@sce.com > > -----Original Message----- > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > Behalf Of Seymour J Metz > Sent: Thursday, May 28, 2020 8:12 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: (External):Re: HMC in Service Mode, IPL Question > > CAUTION EXTERNAL EMAIL > > Technically, it's easy. Installation policy varies all over the landscape. > IMHO a VPN would address the security issues, but it's not my dog. > > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > ________________________________________ > From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on > behalf of R.S. [r.skoru...@bremultibank.com.pl] > Sent: Thursday, May 28, 2020 6:26 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: HMC in Service Mode, IPL Question > > You're remote - so what? > Don't you have remote access to HMC? > Well, I established it approx 19 years ago and visit HMC only for > physical maintenance (HMC installation, physical move to other place, > etc.) > > IMHO nowadays it's quite easy and obvious to have remote access to HMC, > system console (via ICC), "local" terminal (also ICC), etc. > No need to visit datacenter. > > Oh, BTW: it is also possible to have HMC remote. Of course that could mean > another HMC which is not free. > > -- > Radoslaw Skorupka > Lodz, Poland > > > > > > > W dniu 27.05.2020 o 17:55, Mark Jacobs pisze: >> Well, most of us are remote (even under normal times). I'm over a 3.5 hours >> drive from where the HMC is physically located. >> >> Mark Jacobs >> >> Sent from ProtonMail, Swiss-based encrypted email. >> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ >> On Wednesday, May 27, 2020 11:34 AM, R.S. <r.skoru...@bremultibank.com.pl> >> wrote: >> >>> W dniu 27.05.2020 o 15:14, Mark Jacobs pisze: >>> >>>> When the CE places the HMC in service mode will a V XCF,xxxx,OFFLINE,REIPL >>>> command work as expected? >>> ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
