I have the DVD CSI's restored to new names.
<GIMUNZIP>
<ARCHDEF
name="S0802.CPPSMS.OS220440.GLOBAL.CSI.ZIP.pax.Z"
newname="GIBNEY.ZOS21D.MVS.GLOBAL.CSI"
replace="YES"
/>
</GIMUNZIP>
Etc.
That is what I ran the BUILDMCS against. I don't think I need to restore all
the other files, just AIEALNKE and ACDSHFS
I intend a very careful look at the dataset report section from the APPLY CHECK.
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]]
> On Behalf Of Jousma, David
> Sent: Tuesday, March 08, 2016 12:09 PM
> To: [email protected]
> Subject: Re: z/OS Security Level 3 woes
>
> You said:
> " I had not really realized that the Distribution DDDEFs for the RECEIVE and
> APPLY need to point to the new order AIEALNKE, etc. And the targets point to
> my in-progress order.
> I am still not sure how my in-progress order DLIBs get updated."
>
> They shouldn't change. Your SMPE dlibs get updated when you ACCEPT
> maintenance. You are going to need to take the DVD IBM sent you and restore
> it in a way that it doesn't disrupt your current systems, i.e don't catalog
> the
> dlib/target datasets, restore the SMPE datasets to different names, etc. you
> will extract the data you need via buildmcs from that environment. The
> Buildmcs will create a "package" of SMPMCS statements, RELFILES if needed,
> etc that you will then have to receive into your current in-progress
> environment.
> After you receive it, you will apply it, and eventually accept it. Once
> fully
> complete, you will throw away what IBM sent you, never to be used again.
> There should be no cross-pollination from the two environments at all, or you
> will cause yourself more grief.
>
> _________________________________________________________________
> Dave Jousma
> Assistant Vice President, Mainframe Engineering [email protected]
> 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f
> 616.653.2717
>
>
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]]
> On Behalf Of Gibney, David Allen
> Sent: Tuesday, March 08, 2016 2:33 PM
> To: [email protected]
> Subject: Re: z/OS Security Level 3 woes
>
> Thank you David and John.
> z/OS 2.2 is not an option for my z9 :(
>
> Thank you for the comments about my mistaken belief I need to do copies
> outside of SMP/E. I am only a SMP/E savvy (or really anything else) as I need
> to
> be for the problem at hand. The next issue gains priority before I really
> achieve
> mastery of any particular subject.
> I had not really realized that the Distribution DDDEFs for the RECEIVE and
> APPLY need to point to the new order AIEALNKE, etc. And the targets point to
> my in-progress order.
> I am still not sure how my in-progress order DLIBs get updated.
>
> Thank you John. I will check the level of the base functions in both program
> directories. The supplemental order is newer (January 2016) than my order
> (September 2015), but I have also applied maintenance through RSU1512.
>
> I am hopeful this will work. It should be better than my first thoughts. I
> considered just lying to SMP/E and saying these FMIDs were in there with
> basically no maintenance, then seeing if a RECIEVEORDER would bring in
> sufficiently maintained modules to work :(
>
>
> > -----Original Message-----
> > From: IBM Mainframe Discussion List [mailto:[email protected]]
> > On Behalf Of Jousma, David
> > Sent: Tuesday, March 08, 2016 4:25 AM
> > To: [email protected]
> > Subject: Re: z/OS Security Level 3 woes
> >
> > I didn't respond earlier. I don't know what is on the contents of the
> > DVD they sent you. If this DVD is an entire system replacement, you
> > may need to restore it completely to separate(throw-away DASD), and
> > before doing the buildMCS make sure all the maintenance for those
> > FMIDs in that order have been accepted. Then if you can do a
> > buildmcs, you should be able to receive that into your own zones,
> > apply it and be golden. You may have to dink around with creating
> > some additional target/dlib datasets, but you can use the stuff from IBM to
> pattern your own after.
> >
> > Where I lost you is when you said you were going to do this:
> >
> > > And then copy
> > > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31,
> > > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and
> > SIEALNKE
> > > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from
> > ACDSHFS
> > > and SCDSHFS
> >
> > Any manual efforts outside of SMPE utilities will almost always get
> > you in trouble.
> >
> > The only other thing I could suggest would be to scrap it all, and order
> > z/OS
> 2.2.
> > But I don't know what that means to your environment. How far have
> > you rolled out V2.1? If nowhere, then I'd probably go this route.
> > Probably could recover pretty quickly since it is all fresh in your mind.
> >
> _________________________________________________________________
> > Dave Jousma
> > Assistant Vice President, Mainframe Engineering [email protected]
> > 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f
> > 616.653.2717
> >
> > -----Original Message-----
> > From: IBM Mainframe Discussion List [mailto:[email protected]]
> > On Behalf Of Gibney, David Allen
> > Sent: Monday, March 07, 2016 7:08 PM
> > To: [email protected]
> > Subject: Re: z/OS Security Level 3 woes
> >
> > By the silence, I guess everyone thinks this will work, or are too
> > polite to tell me I'm crazy and aiming at my foot.
> >
> > > -----Original Message-----
> > > From: IBM Mainframe Discussion List
> > > [mailto:[email protected]] On Behalf Of Gibney, David Allen
> > > Sent: Friday, March 04, 2016 5:44 PM
> > > To: [email protected]
> > > Subject: z/OS Security Level 3 woes
> > >
> > > So, this was left out of my z/OS Serverpac back in September, either
> > > by my mistake, or when my order was adjusted because I did order a
> > > new
> > > (chargable) product I did not need.
> > > And I did not discover this until it was too late to order via
> > > normal channels. IBM Shopz Archives was able to send me a DVD of an
> > > January
> > > 2016 order containing these FMIDs.
> > >
> > > My plan is to use BUILDMCS
> > > FORFMID (
> > > JCPT411 JCRY741 JRSL411 JSWK411
> > > ) .
> > > to extract these FMIDs and then RECEIVE the MCS into my Z/OS 2.1
> > > zones from my original order.
> > >
> > > And then copy
> > > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31,
> > > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and
> > SIEALNKE
> > > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from
> > ACDSHFS
> > > and SCDSHFS
> > >
> > > The BUILDMCS report is here:
> > > BUILDMCS FUNCTION SUMMARY REPORT
> > >
> > > NOTE: '*' INDICATES THE ASSOCIATED SYSMOD IS IN ERROR
> > >
> > > FUNCTION STATUS FMID ASSOCIATED SYSMODS
> > >
> > > JCPT411 SELECTED HCPT410 UA76980 UA79715
> > > JCRY741 SELECTED HCRY740
> > > JRSL411 SELECTED HRSL410
> > > JSWK411 SELECTED HSWK410
> > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCPT411
> > >
> > > ENTRY ENTRY ENTRY CURRENT
> > > TYPE NAME STATUS RMID COMMENTS
> > >
> > > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET
> > > AND
> > > DISTRIBUTION ZONE
> > > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > > ZONE
> > > PROGRAM GSKC31F SELECTED UA76980
> > > PROGRAM GSKC64F SELECTED UA76980
> > > PROGRAM GSKSUS31 SELECTED JCPT411
> > > PROGRAM GSKSUS64 SELECTED JCPT411
> > > PROGRAM GSKS31F SELECTED UA79715
> > > PROGRAM GSKS64F SELECTED UA79715
> > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCRY741
> > >
> > > ENTRY ENTRY ENTRY CURRENT
> > > TYPE NAME STATUS RMID COMMENTS
> > >
> > > DDDEF ACDSHFS REQUIRED REQUIRED IN TARGET
> > > AND
> > > DISTRIBUTION ZONE
> > > DDDEF SCDSHFS REQUIRED REQUIRED IN TARGET
> > > ZONE
> > > HFS CDSLM036 SELECTED JCRY741
> > > HFS CDSLM037 SELECTED JCRY741
> > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JRSL411
> > >
> > > ENTRY ENTRY ENTRY CURRENT
> > > TYPE NAME STATUS RMID COMMENTS
> > >
> > > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET
> > > AND
> > > DISTRIBUTION ZONE
> > > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > > ZONE
> > > PROGRAM GLDCLS31 SELECTED JRSL411
> > > PROGRAM GLDCLS64 SELECTED JRSL411
> > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JSWK411
> > >
> > > ENTRY ENTRY ENTRY CURRENT
> > > TYPE NAME STATUS RMID COMMENTS
> > >
> > > DDDEF AIEALNKE REQUIRED REQUIRED IN TARGET
> > > AND
> > > DISTRIBUTION ZONE
> > > DDDEF SIEALNKE REQUIRED REQUIRED IN TARGET
> > > ZONE
> > > PROGRAM EUVFKDLC SELECTED JSWK411
> > > PROGRAM EUVFKD6C SELECTED JSWK411
> > >
> > > And the MCS from the new order is below:
> > > ++FUNCTION(JCPT411)
> > > DESC(z/OS Security Level 3 - System SSL Security Level 3)
> > > REWORK(2016064)
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/
> > > /*** THIS MCS FOR FUNCTION JCPT411 WAS CREATED BY THE BUILDMCS
> > ***/
> > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/ .
> > > ++VER(Z038)
> DELETE(JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,
> > >
> >
> JCPT3A1,JCPT3B1,JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT3
> > > 91,
> > > JRSL151,JRSL161,JRSL171) FMID(HCPT410) REQ(UA76979,UA79714)
> > > SUP(AA42102,
> > >
> >
> AA42605,AA42741,AA44467,AA44842,AA45216,AA45324,AA46489,AA46805,A
> > > A46960,
> > >
> >
> AA47183,AA47405,AA47911,BA42102,BA42605,BA42741,BA44467,BA44842,B
> > > A45216,
> > >
> >
> BA45324,BA46489,BA46805,BA46960,BA47183,BA47405,BA47911,CA44842,C
> > > A45216,
> > >
> >
> CA45324,JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,JCPT3A1,JCP
> > > T3B1,
> > >
> >
> JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT391,JRSL151,JRSL1
> > > 61,
> > >
> >
> JRSL171,UA69053,UA70216,UA70897,UA72957,UA73465,UA74564,UA74623,U
> > > A75543,
> > > UA76259,UA76422,UA76980,UA77326,UA79715).
> > > ++IF FMID(JCPT41J) THEN REQ(UA74371).
> > > ++IF FMID(HCPT420) THEN REQ(UA79716).
> > > ++IF FMID(JCPT421) THEN REQ(UA79718).
> > > ++PROGRAM(GSKC31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)
> > > ) RMID(UA76980) SYSLIB(SIEALNKE).
> > > ++PROGRAM(GSKC64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)
> > > ) RMID(UA76980) SYSLIB(SIEALNKE).
> > > ++PROGRAM(GSKSUS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)) SYSLIB(SIEALNKE).
> > > ++PROGRAM(GSKSUS64) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)) SYSLIB(SIEALNKE).
> > > ++PROGRAM(GSKS31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)
> > > ) RMID(UA79715) SYSLIB(SIEALNKE).
> > > ++PROGRAM(GSKS64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)
> > > ) RMID(UA79715) SYSLIB(SIEALNKE).
> > > ++FUNCTION(JCRY741) DESC(z/OS Security Level 3 - OCSF Security Level
> > > ++3)
> > > REWORK(2016064)
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/
> > > /*** THIS MCS FOR FUNCTION JCRY741 WAS CREATED BY THE BUILDMCS
> > ***/
> > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/ .
> > > ++VER(Z038) DELETE(JCRY2A6,JCRY276,JCRY286,JCRY296) FMID(HCRY740)
> > > SUP(
> > > JCRY2A6,JCRY276,JCRY286,JCRY296).
> > > ++HFS(CDSLM036) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS)
> > NUMBER(1)
> > > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM(
> > > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmmanp_sl3.dll')
> > > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmmanp.dll',
> > > '../../../../usr/lib/cssmmanp.dll') SYMPATH('cssmmanp_sl3.dll',
> > > '../../usr/lpp/ocsf/lib/cssmmanp_sl3.dll') .
> > > ++HFS(CDSLM037) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS)
> > NUMBER(1)
> > > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM(
> > > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmusep_sl3.dll')
> > > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmusep.dll',
> > > '../../../../usr/lib/cssmusep.dll') SYMPATH('cssmusep_sl3.dll',
> > > '../../usr/lpp/ocsf/lib/cssmusep_sl3.dll') .
> > > ++FUNCTION(JRSL411)
> > > DESC(z/OS Security Level 3 - IBM TDS for z/OS Security Level 3)
> > > REWORK(2016064)
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/
> > > /*** THIS MCS FOR FUNCTION JRSL411 WAS CREATED BY THE BUILDMCS
> > ***/
> > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/ .
> > > ++VER(Z038) DELETE(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,JRSL363,
> > > JRSL381) FMID(HRSL410) SUP(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,
> > > JRSL363,JRSL381).
> > > ++PROGRAM(GLDCLS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)) SYSLIB(SIEALNKE).
> > > ++PROGRAM(GLDCLS64) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)) SYSLIB(SIEALNKE).
> > > ++FUNCTION(JSWK411)
> > > DESC(z/OS Security Level 3 - Network Authentication Srv Security L3)
> > > REWORK(2016064)
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/
> > > /*** THIS MCS FOR FUNCTION JSWK411 WAS CREATED BY THE BUILDMCS
> > ***/
> > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/
> > >
> >
> /****************************************************************
> > > **/
> > >
> >
> /****************************************************************
> > > **/ .
> > > ++VER(Z038)
> > > DELETE(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,JSWK321,JSWK341,
> > > JSWK361,JSWK391) FMID(HSWK410)
> > > SUP(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,
> > > JSWK321,JSWK341,JSWK361,JSWK391).
> > > ++PROGRAM(EUVFKDLC) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)) SYSLIB(SIEALNKE).
> > > ++PROGRAM(EUVFKD6C) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE)
> > > NUMBER(1)) SYSLIB(SIEALNKE).
> > >
> > >
> > > Dave Gibney
> > > Information Technology Services
> > > Washington State University
> > >
> > >
> > > --------------------------------------------------------------------
> > > -- For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to [email protected] with the message: INFO
> > > IBM-MAIN
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to [email protected] with the message: INFO IBM-MAIN
> >
> > This e-mail transmission contains information that is confidential and may
> > be
> > privileged. It is intended only for the addressee(s) named above. If you
> receive
> > this e-mail in error, please do not read, copy or disseminate it in
> > any manner. If you are not the intended recipient, any disclosure,
> > copying, distribution or use of the contents of this information is
> > prohibited. Please reply to the message immediately by informing the
> > sender that the message was misdirected. After replying, please erase
> > it from your computer system. Your assistance in correcting this error is
> appreciated.
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to [email protected] with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email to
> [email protected] with the message: INFO IBM-MAIN
>
> This e-mail transmission contains information that is confidential and may be
> privileged. It is intended only for the addressee(s) named above. If you
> receive
> this e-mail in error, please do not read, copy or disseminate it in any
> manner. If
> you are not the intended recipient, any disclosure, copying, distribution or
> use of
> the contents of this information is prohibited. Please reply to the message
> immediately by informing the sender that the message was misdirected. After
> replying, please erase it from your computer system. Your assistance in
> correcting this error is appreciated.
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email to
> [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
