Thank you David and John.
z/OS 2.2 is not an option for my z9 :(
Thank you for the comments about my mistaken belief I need to do copies
outside of SMP/E. I am only a SMP/E savvy (or really anything else) as I need
to be for the problem at hand. The next issue gains priority before I really
achieve mastery of any particular subject.
I had not really realized that the Distribution DDDEFs for the RECEIVE and
APPLY need to point to the new order AIEALNKE, etc. And the targets point to my
in-progress order.
I am still not sure how my in-progress order DLIBs get updated.
Thank you John. I will check the level of the base functions in both program
directories. The supplemental order is newer (January 2016) than my order
(September 2015), but I have also applied maintenance through RSU1512.
I am hopeful this will work. It should be better than my first thoughts. I
considered just lying to SMP/E and saying these FMIDs were in there with
basically no maintenance, then seeing if a RECIEVEORDER would bring in
sufficiently maintained modules to work :(
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]]
> On Behalf Of Jousma, David
> Sent: Tuesday, March 08, 2016 4:25 AM
> To: [email protected]
> Subject: Re: z/OS Security Level 3 woes
>
> I didn't respond earlier. I don't know what is on the contents of the DVD
> they
> sent you. If this DVD is an entire system replacement, you may need to
> restore
> it completely to separate(throw-away DASD), and before doing the buildMCS
> make sure all the maintenance for those FMIDs in that order have been
> accepted. Then if you can do a buildmcs, you should be able to receive that
> into
> your own zones, apply it and be golden. You may have to dink around with
> creating some additional target/dlib datasets, but you can use the stuff from
> IBM to pattern your own after.
>
> Where I lost you is when you said you were going to do this:
>
> > And then copy
> > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31,
> > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and
> SIEALNKE
> > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from
> ACDSHFS
> > and SCDSHFS
>
> Any manual efforts outside of SMPE utilities will almost always get you in
> trouble.
>
> The only other thing I could suggest would be to scrap it all, and order z/OS
> 2.2.
> But I don't know what that means to your environment. How far have you rolled
> out V2.1? If nowhere, then I'd probably go this route. Probably could
> recover
> pretty quickly since it is all fresh in your mind.
> _________________________________________________________________
> Dave Jousma
> Assistant Vice President, Mainframe Engineering [email protected]
> 1830 East Paris, Grand Rapids, MIĀ 49546 MD RSCB2H p 616.653.8429 f
> 616.653.2717
>
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]]
> On Behalf Of Gibney, David Allen
> Sent: Monday, March 07, 2016 7:08 PM
> To: [email protected]
> Subject: Re: z/OS Security Level 3 woes
>
> By the silence, I guess everyone thinks this will work, or are too polite to
> tell me
> I'm crazy and aiming at my foot.
>
> > -----Original Message-----
> > From: IBM Mainframe Discussion List [mailto:[email protected]]
> > On Behalf Of Gibney, David Allen
> > Sent: Friday, March 04, 2016 5:44 PM
> > To: [email protected]
> > Subject: z/OS Security Level 3 woes
> >
> > So, this was left out of my z/OS Serverpac back in September, either
> > by my mistake, or when my order was adjusted because I did order a new
> > (chargable) product I did not need.
> > And I did not discover this until it was too late to order via normal
> > channels. IBM Shopz Archives was able to send me a DVD of an January
> > 2016 order containing these FMIDs.
> >
> > My plan is to use BUILDMCS
> > FORFMID (
> > JCPT411 JCRY741 JRSL411 JSWK411
> > ) .
> > to extract these FMIDs and then RECEIVE the MCS into my Z/OS 2.1 zones
> > from my original order.
> >
> > And then copy
> > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31,
> > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and
> SIEALNKE
> > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from
> ACDSHFS
> > and SCDSHFS
> >
> > The BUILDMCS report is here:
> > BUILDMCS FUNCTION SUMMARY REPORT
> >
> > NOTE: '*' INDICATES THE ASSOCIATED SYSMOD IS IN ERROR
> >
> > FUNCTION STATUS FMID ASSOCIATED SYSMODS
> >
> > JCPT411 SELECTED HCPT410 UA76980 UA79715
> > JCRY741 SELECTED HCRY740
> > JRSL411 SELECTED HRSL410
> > JSWK411 SELECTED HSWK410
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCPT411
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > ZONE
> > PROGRAM GSKC31F SELECTED UA76980
> > PROGRAM GSKC64F SELECTED UA76980
> > PROGRAM GSKSUS31 SELECTED JCPT411
> > PROGRAM GSKSUS64 SELECTED JCPT411
> > PROGRAM GSKS31F SELECTED UA79715
> > PROGRAM GSKS64F SELECTED UA79715
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCRY741
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF ACDSHFS REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SCDSHFS REQUIRED REQUIRED IN TARGET
> > ZONE
> > HFS CDSLM036 SELECTED JCRY741
> > HFS CDSLM037 SELECTED JCRY741
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JRSL411
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > ZONE
> > PROGRAM GLDCLS31 SELECTED JRSL411
> > PROGRAM GLDCLS64 SELECTED JRSL411
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JSWK411
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > ZONE
> > PROGRAM EUVFKDLC SELECTED JSWK411
> > PROGRAM EUVFKD6C SELECTED JSWK411
> >
> > And the MCS from the new order is below:
> > ++FUNCTION(JCPT411)
> > DESC(z/OS Security Level 3 - System SSL Security Level 3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JCPT411 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038) DELETE(JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,
> >
> JCPT3A1,JCPT3B1,JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT3
> > 91,
> > JRSL151,JRSL161,JRSL171) FMID(HCPT410) REQ(UA76979,UA79714)
> > SUP(AA42102,
> >
> AA42605,AA42741,AA44467,AA44842,AA45216,AA45324,AA46489,AA46805,A
> > A46960,
> >
> AA47183,AA47405,AA47911,BA42102,BA42605,BA42741,BA44467,BA44842,B
> > A45216,
> >
> BA45324,BA46489,BA46805,BA46960,BA47183,BA47405,BA47911,CA44842,C
> > A45216,
> >
> CA45324,JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,JCPT3A1,JCP
> > T3B1,
> >
> JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT391,JRSL151,JRSL1
> > 61,
> >
> JRSL171,UA69053,UA70216,UA70897,UA72957,UA73465,UA74564,UA74623,U
> > A75543,
> > UA76259,UA76422,UA76980,UA77326,UA79715).
> > ++IF FMID(JCPT41J) THEN REQ(UA74371).
> > ++IF FMID(HCPT420) THEN REQ(UA79716).
> > ++IF FMID(JCPT421) THEN REQ(UA79718).
> > ++PROGRAM(GSKC31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA76980) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKC64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA76980) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKSUS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKSUS64) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKS31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA79715) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKS64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA79715) SYSLIB(SIEALNKE).
> > ++FUNCTION(JCRY741) DESC(z/OS Security Level 3 - OCSF Security Level
> > ++3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JCRY741 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038) DELETE(JCRY2A6,JCRY276,JCRY286,JCRY296) FMID(HCRY740)
> > SUP(
> > JCRY2A6,JCRY276,JCRY286,JCRY296).
> > ++HFS(CDSLM036) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS)
> NUMBER(1)
> > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM(
> > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmmanp_sl3.dll')
> > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmmanp.dll',
> > '../../../../usr/lib/cssmmanp.dll') SYMPATH('cssmmanp_sl3.dll',
> > '../../usr/lpp/ocsf/lib/cssmmanp_sl3.dll') .
> > ++HFS(CDSLM037) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS)
> NUMBER(1)
> > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM(
> > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmusep_sl3.dll')
> > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmusep.dll',
> > '../../../../usr/lib/cssmusep.dll') SYMPATH('cssmusep_sl3.dll',
> > '../../usr/lpp/ocsf/lib/cssmusep_sl3.dll') .
> > ++FUNCTION(JRSL411)
> > DESC(z/OS Security Level 3 - IBM TDS for z/OS Security Level 3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JRSL411 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038) DELETE(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,JRSL363,
> > JRSL381) FMID(HRSL410) SUP(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,
> > JRSL363,JRSL381).
> > ++PROGRAM(GLDCLS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(GLDCLS64) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++FUNCTION(JSWK411)
> > DESC(z/OS Security Level 3 - Network Authentication Srv Security L3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JSWK411 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038)
> > DELETE(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,JSWK321,JSWK341,
> > JSWK361,JSWK391) FMID(HSWK410)
> > SUP(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,
> > JSWK321,JSWK341,JSWK361,JSWK391).
> > ++PROGRAM(EUVFKDLC) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(EUVFKD6C) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> >
> >
> > Dave Gibney
> > Information Technology Services
> > Washington State University
> >
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to [email protected] with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email to
> [email protected] with the message: INFO IBM-MAIN
>
> This e-mail transmission contains information that is confidential and may be
> privileged. It is intended only for the addressee(s) named above. If you
> receive
> this e-mail in error, please do not read, copy or disseminate it in any
> manner. If
> you are not the intended recipient, any disclosure, copying, distribution or
> use of
> the contents of this information is prohibited. Please reply to the message
> immediately by informing the sender that the message was misdirected. After
> replying, please erase it from your computer system. Your assistance in
> correcting this error is appreciated.
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email to
> [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN