You said:
" I had not really realized that the Distribution DDDEFs for the RECEIVE and
APPLY need to point to the new order AIEALNKE, etc. And the targets point to my
in-progress order.
I am still not sure how my in-progress order DLIBs get updated."
They shouldn't change. Your SMPE dlibs get updated when you ACCEPT
maintenance. You are going to need to take the DVD IBM sent you and restore
it in a way that it doesn't disrupt your current systems, i.e don't catalog the
dlib/target datasets, restore the SMPE datasets to different names, etc. you
will extract the data you need via buildmcs from that environment. The
Buildmcs will create a "package" of SMPMCS statements, RELFILES if needed, etc
that you will then have to receive into your current in-progress environment.
After you receive it, you will apply it, and eventually accept it. Once fully
complete, you will throw away what IBM sent you, never to be used again.
There should be no cross-pollination from the two environments at all, or you
will cause yourself more grief.
_________________________________________________________________
Dave Jousma
Assistant Vice President, Mainframe Engineering
[email protected]
1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H
p 616.653.8429
f 616.653.2717
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf
Of Gibney, David Allen
Sent: Tuesday, March 08, 2016 2:33 PM
To: [email protected]
Subject: Re: z/OS Security Level 3 woes
Thank you David and John.
z/OS 2.2 is not an option for my z9 :(
Thank you for the comments about my mistaken belief I need to do copies
outside of SMP/E. I am only a SMP/E savvy (or really anything else) as I need
to be for the problem at hand. The next issue gains priority before I really
achieve mastery of any particular subject.
I had not really realized that the Distribution DDDEFs for the RECEIVE and
APPLY need to point to the new order AIEALNKE, etc. And the targets point to my
in-progress order.
I am still not sure how my in-progress order DLIBs get updated.
Thank you John. I will check the level of the base functions in both program
directories. The supplemental order is newer (January 2016) than my order
(September 2015), but I have also applied maintenance through RSU1512.
I am hopeful this will work. It should be better than my first thoughts. I
considered just lying to SMP/E and saying these FMIDs were in there with
basically no maintenance, then seeing if a RECIEVEORDER would bring in
sufficiently maintained modules to work :(
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]]
> On Behalf Of Jousma, David
> Sent: Tuesday, March 08, 2016 4:25 AM
> To: [email protected]
> Subject: Re: z/OS Security Level 3 woes
>
> I didn't respond earlier. I don't know what is on the contents of the
> DVD they sent you. If this DVD is an entire system replacement, you
> may need to restore it completely to separate(throw-away DASD), and
> before doing the buildMCS make sure all the maintenance for those
> FMIDs in that order have been accepted. Then if you can do a
> buildmcs, you should be able to receive that into your own zones,
> apply it and be golden. You may have to dink around with creating
> some additional target/dlib datasets, but you can use the stuff from IBM to
> pattern your own after.
>
> Where I lost you is when you said you were going to do this:
>
> > And then copy
> > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31,
> > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and
> SIEALNKE
> > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from
> ACDSHFS
> > and SCDSHFS
>
> Any manual efforts outside of SMPE utilities will almost always get
> you in trouble.
>
> The only other thing I could suggest would be to scrap it all, and order z/OS
> 2.2.
> But I don't know what that means to your environment. How far have
> you rolled out V2.1? If nowhere, then I'd probably go this route.
> Probably could recover pretty quickly since it is all fresh in your mind.
> _________________________________________________________________
> Dave Jousma
> Assistant Vice President, Mainframe Engineering [email protected]
> 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f
> 616.653.2717
>
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]]
> On Behalf Of Gibney, David Allen
> Sent: Monday, March 07, 2016 7:08 PM
> To: [email protected]
> Subject: Re: z/OS Security Level 3 woes
>
> By the silence, I guess everyone thinks this will work, or are too
> polite to tell me I'm crazy and aiming at my foot.
>
> > -----Original Message-----
> > From: IBM Mainframe Discussion List
> > [mailto:[email protected]] On Behalf Of Gibney, David Allen
> > Sent: Friday, March 04, 2016 5:44 PM
> > To: [email protected]
> > Subject: z/OS Security Level 3 woes
> >
> > So, this was left out of my z/OS Serverpac back in September, either
> > by my mistake, or when my order was adjusted because I did order a
> > new
> > (chargable) product I did not need.
> > And I did not discover this until it was too late to order via
> > normal channels. IBM Shopz Archives was able to send me a DVD of an
> > January
> > 2016 order containing these FMIDs.
> >
> > My plan is to use BUILDMCS
> > FORFMID (
> > JCPT411 JCRY741 JRSL411 JSWK411
> > ) .
> > to extract these FMIDs and then RECEIVE the MCS into my Z/OS 2.1
> > zones from my original order.
> >
> > And then copy
> > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31,
> > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and
> SIEALNKE
> > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from
> ACDSHFS
> > and SCDSHFS
> >
> > The BUILDMCS report is here:
> > BUILDMCS FUNCTION SUMMARY REPORT
> >
> > NOTE: '*' INDICATES THE ASSOCIATED SYSMOD IS IN ERROR
> >
> > FUNCTION STATUS FMID ASSOCIATED SYSMODS
> >
> > JCPT411 SELECTED HCPT410 UA76980 UA79715
> > JCRY741 SELECTED HCRY740
> > JRSL411 SELECTED HRSL410
> > JSWK411 SELECTED HSWK410
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCPT411
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > ZONE
> > PROGRAM GSKC31F SELECTED UA76980
> > PROGRAM GSKC64F SELECTED UA76980
> > PROGRAM GSKSUS31 SELECTED JCPT411
> > PROGRAM GSKSUS64 SELECTED JCPT411
> > PROGRAM GSKS31F SELECTED UA79715
> > PROGRAM GSKS64F SELECTED UA79715
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCRY741
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF ACDSHFS REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SCDSHFS REQUIRED REQUIRED IN TARGET
> > ZONE
> > HFS CDSLM036 SELECTED JCRY741
> > HFS CDSLM037 SELECTED JCRY741
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JRSL411
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > ZONE
> > PROGRAM GLDCLS31 SELECTED JRSL411
> > PROGRAM GLDCLS64 SELECTED JRSL411
> > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JSWK411
> >
> > ENTRY ENTRY ENTRY CURRENT
> > TYPE NAME STATUS RMID COMMENTS
> >
> > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET AND
> > DISTRIBUTION ZONE
> > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > ZONE
> > PROGRAM EUVFKDLC SELECTED JSWK411
> > PROGRAM EUVFKD6C SELECTED JSWK411
> >
> > And the MCS from the new order is below:
> > ++FUNCTION(JCPT411)
> > DESC(z/OS Security Level 3 - System SSL Security Level 3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JCPT411 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038) DELETE(JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,
> >
> JCPT3A1,JCPT3B1,JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT3
> > 91,
> > JRSL151,JRSL161,JRSL171) FMID(HCPT410) REQ(UA76979,UA79714)
> > SUP(AA42102,
> >
> AA42605,AA42741,AA44467,AA44842,AA45216,AA45324,AA46489,AA46805,A
> > A46960,
> >
> AA47183,AA47405,AA47911,BA42102,BA42605,BA42741,BA44467,BA44842,B
> > A45216,
> >
> BA45324,BA46489,BA46805,BA46960,BA47183,BA47405,BA47911,CA44842,C
> > A45216,
> >
> CA45324,JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,JCPT3A1,JCP
> > T3B1,
> >
> JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT391,JRSL151,JRSL1
> > 61,
> >
> JRSL171,UA69053,UA70216,UA70897,UA72957,UA73465,UA74564,UA74623,U
> > A75543,
> > UA76259,UA76422,UA76980,UA77326,UA79715).
> > ++IF FMID(JCPT41J) THEN REQ(UA74371).
> > ++IF FMID(HCPT420) THEN REQ(UA79716).
> > ++IF FMID(JCPT421) THEN REQ(UA79718).
> > ++PROGRAM(GSKC31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA76980) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKC64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA76980) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKSUS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKSUS64) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKS31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA79715) SYSLIB(SIEALNKE).
> > ++PROGRAM(GSKS64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)
> > ) RMID(UA79715) SYSLIB(SIEALNKE).
> > ++FUNCTION(JCRY741) DESC(z/OS Security Level 3 - OCSF Security Level
> > ++3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JCRY741 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038) DELETE(JCRY2A6,JCRY276,JCRY286,JCRY296) FMID(HCRY740)
> > SUP(
> > JCRY2A6,JCRY276,JCRY286,JCRY296).
> > ++HFS(CDSLM036) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS)
> NUMBER(1)
> > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM(
> > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmmanp_sl3.dll')
> > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmmanp.dll',
> > '../../../../usr/lib/cssmmanp.dll') SYMPATH('cssmmanp_sl3.dll',
> > '../../usr/lpp/ocsf/lib/cssmmanp_sl3.dll') .
> > ++HFS(CDSLM037) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS)
> NUMBER(1)
> > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM(
> > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmusep_sl3.dll')
> > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmusep.dll',
> > '../../../../usr/lib/cssmusep.dll') SYMPATH('cssmusep_sl3.dll',
> > '../../usr/lpp/ocsf/lib/cssmusep_sl3.dll') .
> > ++FUNCTION(JRSL411)
> > DESC(z/OS Security Level 3 - IBM TDS for z/OS Security Level 3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JRSL411 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038) DELETE(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,JRSL363,
> > JRSL381) FMID(HRSL410) SUP(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,
> > JRSL363,JRSL381).
> > ++PROGRAM(GLDCLS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(GLDCLS64) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++FUNCTION(JSWK411)
> > DESC(z/OS Security Level 3 - Network Authentication Srv Security L3)
> > REWORK(2016064)
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/
> > /*** THIS MCS FOR FUNCTION JSWK411 WAS CREATED BY THE BUILDMCS
> ***/
> > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> >
> /****************************************************************
> > **/
> >
> /****************************************************************
> > **/ .
> > ++VER(Z038)
> > DELETE(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,JSWK321,JSWK341,
> > JSWK361,JSWK391) FMID(HSWK410)
> > SUP(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,
> > JSWK321,JSWK341,JSWK361,JSWK391).
> > ++PROGRAM(EUVFKDLC) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> > ++PROGRAM(EUVFKD6C) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > NUMBER(1)) SYSLIB(SIEALNKE).
> >
> >
> > Dave Gibney
> > Information Technology Services
> > Washington State University
> >
> >
> > --------------------------------------------------------------------
> > -- For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to [email protected] with the message: INFO
> > IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to [email protected] with the message: INFO IBM-MAIN
>
> This e-mail transmission contains information that is confidential and may be
> privileged. It is intended only for the addressee(s) named above. If you
> receive
> this e-mail in error, please do not read, copy or disseminate it in
> any manner. If you are not the intended recipient, any disclosure,
> copying, distribution or use of the contents of this information is
> prohibited. Please reply to the message immediately by informing the
> sender that the message was misdirected. After replying, please erase
> it from your computer system. Your assistance in correcting this error is
> appreciated.
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBM-MAIN
This e-mail transmission contains information that is confidential and may be
privileged. It is intended only for the addressee(s) named above. If you
receive this e-mail in error, please do not read, copy or disseminate it in any
manner. If you are not the intended recipient, any disclosure, copying,
distribution or use of the contents of this information is prohibited. Please
reply to the message immediately by informing the sender that the message was
misdirected. After replying, please erase it from your computer system. Your
assistance in correcting this error is appreciated.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
