Thank you again. I think I finally got it. The BUILDMCS includes several like this: ++PROGRAM(GLDCLS31) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE) NUMBER(1)) SYSLIB(SIEALNKE). I need to change these to FROMDS(DSN(mydvd.SYS1.AIEALNKE) not the DDDEF for AIEALNKE of my in-progress SMP/E.
It will take me awhile to check the program directories and be sure I've identified all FMIDs I need to BUILDMCS for. Thanks for the help. I'll share the apply check results when I get them. > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] > On Behalf Of Jousma, David > Sent: Tuesday, March 08, 2016 12:27 PM > To: [email protected] > Subject: Re: z/OS Security Level 3 woes > > Well, when you run the buildmcs for the fmid's you want from that IBM DVD, > SMPE will access, any and all dlib datasets associated with those FMID's to > build > the package. If that's all it is then great! > > So to finish my thought from the original response I gave you, everything you > need for your "real" environment will be in the buildmcs package. Don't make > any changes to your in-progress dddefs to point to anything new or different, > unless you get a NODDDEF error, which would indicate that you would need to > allocate a new empty dataset(s)(patterned after what IBM sent you), and add a > DDDEF entry for it. > > As John Eells mentioned you could still have some issues with modules at > differing levels of maintenance. But lets get your buildmcs done, received, > and > an applycheck run and see where to go next... > > _________________________________________________________________ > Dave Jousma > Assistant Vice President, Mainframe Engineering [email protected] > 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f > 616.653.2717 > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] > On Behalf Of Gibney, David Allen > Sent: Tuesday, March 08, 2016 3:18 PM > To: [email protected] > Subject: Re: z/OS Security Level 3 woes > > I have the DVD CSI's restored to new names. > <GIMUNZIP> > <ARCHDEF > name="S0802.CPPSMS.OS220440.GLOBAL.CSI.ZIP.pax.Z" > newname="GIBNEY.ZOS21D.MVS.GLOBAL.CSI" > replace="YES" > /> > </GIMUNZIP> > Etc. > That is what I ran the BUILDMCS against. I don't think I need to restore all > the > other files, just AIEALNKE and ACDSHFS > > I intend a very careful look at the dataset report section from the APPLY > CHECK. > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:[email protected]] > > On Behalf Of Jousma, David > > Sent: Tuesday, March 08, 2016 12:09 PM > > To: [email protected] > > Subject: Re: z/OS Security Level 3 woes > > > > You said: > > " I had not really realized that the Distribution DDDEFs for the > > RECEIVE and APPLY need to point to the new order AIEALNKE, etc. And > > the targets point to my in-progress order. > > I am still not sure how my in-progress order DLIBs get updated." > > > > They shouldn't change. Your SMPE dlibs get updated when you ACCEPT > > maintenance. You are going to need to take the DVD IBM sent you and > restore > > it in a way that it doesn't disrupt your current systems, i.e don't catalog > > the > > dlib/target datasets, restore the SMPE datasets to different names, etc. > > you > > will extract the data you need via buildmcs from that environment. The > > Buildmcs will create a "package" of SMPMCS statements, RELFILES if > > needed, etc that you will then have to receive into your current in-progress > environment. > > After you receive it, you will apply it, and eventually accept it. Once > > fully > > complete, you will throw away what IBM sent you, never to be used again. > > There should be no cross-pollination from the two environments at all, > > or you will cause yourself more grief. > > > > > _________________________________________________________________ > > Dave Jousma > > Assistant Vice President, Mainframe Engineering [email protected] > > 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f > > 616.653.2717 > > > > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:[email protected]] > > On Behalf Of Gibney, David Allen > > Sent: Tuesday, March 08, 2016 2:33 PM > > To: [email protected] > > Subject: Re: z/OS Security Level 3 woes > > > > Thank you David and John. > > z/OS 2.2 is not an option for my z9 :( > > > > Thank you for the comments about my mistaken belief I need to do > > copies outside of SMP/E. I am only a SMP/E savvy (or really anything > > else) as I need to be for the problem at hand. The next issue gains > > priority before I really achieve mastery of any particular subject. > > I had not really realized that the Distribution DDDEFs for the > > RECEIVE and APPLY need to point to the new order AIEALNKE, etc. And > > the targets point to my in-progress order. > > I am still not sure how my in-progress order DLIBs get updated. > > > > Thank you John. I will check the level of the base functions in both > > program directories. The supplemental order is newer (January 2016) > > than my order (September 2015), but I have also applied maintenance through > RSU1512. > > > > I am hopeful this will work. It should be better than my first > > thoughts. I considered just lying to SMP/E and saying these FMIDs were > > in there with basically no maintenance, then seeing if a RECIEVEORDER > > would bring in sufficiently maintained modules to work :( > > > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List > > > [mailto:[email protected]] On Behalf Of Jousma, David > > > Sent: Tuesday, March 08, 2016 4:25 AM > > > To: [email protected] > > > Subject: Re: z/OS Security Level 3 woes > > > > > > I didn't respond earlier. I don't know what is on the contents of > > > the DVD they sent you. If this DVD is an entire system replacement, > > > you may need to restore it completely to separate(throw-away DASD), > > > and before doing the buildMCS make sure all the maintenance for > > > those FMIDs in that order have been accepted. Then if you can do a > > > buildmcs, you should be able to receive that into your own zones, > > > apply it and be golden. You may have to dink around with creating > > > some additional target/dlib datasets, but you can use the stuff from > > > IBM to > > pattern your own after. > > > > > > Where I lost you is when you said you were going to do this: > > > > > > > And then copy > > > > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31, > > > > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and > > > SIEALNKE > > > > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from > > > ACDSHFS > > > > and SCDSHFS > > > > > > Any manual efforts outside of SMPE utilities will almost always get > > > you in trouble. > > > > > > The only other thing I could suggest would be to scrap it all, and > > > order z/OS > > 2.2. > > > But I don't know what that means to your environment. How far have > > > you rolled out V2.1? If nowhere, then I'd probably go this route. > > > Probably could recover pretty quickly since it is all fresh in your mind. > > > > > > _________________________________________________________________ > > > Dave Jousma > > > Assistant Vice President, Mainframe Engineering [email protected] > > > 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f > > > 616.653.2717 > > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List > > > [mailto:[email protected]] On Behalf Of Gibney, David Allen > > > Sent: Monday, March 07, 2016 7:08 PM > > > To: [email protected] > > > Subject: Re: z/OS Security Level 3 woes > > > > > > By the silence, I guess everyone thinks this will work, or are too > > > polite to tell me I'm crazy and aiming at my foot. > > > > > > > -----Original Message----- > > > > From: IBM Mainframe Discussion List > > > > [mailto:[email protected]] On Behalf Of Gibney, David Allen > > > > Sent: Friday, March 04, 2016 5:44 PM > > > > To: [email protected] > > > > Subject: z/OS Security Level 3 woes > > > > > > > > So, this was left out of my z/OS Serverpac back in September, > > > > either by my mistake, or when my order was adjusted because I did > > > > order a new > > > > (chargable) product I did not need. > > > > And I did not discover this until it was too late to order via > > > > normal channels. IBM Shopz Archives was able to send me a DVD of > > > > an January > > > > 2016 order containing these FMIDs. > > > > > > > > My plan is to use BUILDMCS > > > > FORFMID ( > > > > JCPT411 JCRY741 JRSL411 JSWK411 > > > > ) . > > > > to extract these FMIDs and then RECEIVE the MCS into my Z/OS 2.1 > > > > zones from my original order. > > > > > > > > And then copy > > > > GSKC31F , GSKC64F , GSKSUS31, GSKSUS64, GSKS31F,GSKS64F, GLDCLS31, > > > > GLDCLS64, EUVFKDLC, EUVFKD6C from the new order AIEALNKE and > > > SIEALNKE > > > > to my order AIEALNKE and SIEALNKE and CDSLM036, CDSLM037 from > > > ACDSHFS > > > > and SCDSHFS > > > > > > > > The BUILDMCS report is here: > > > > BUILDMCS FUNCTION SUMMARY REPORT > > > > > > > > NOTE: '*' INDICATES THE ASSOCIATED SYSMOD IS IN ERROR > > > > > > > > FUNCTION STATUS FMID ASSOCIATED SYSMODS > > > > > > > > JCPT411 SELECTED HCPT410 UA76980 UA79715 > > > > JCRY741 SELECTED HCRY740 > > > > JRSL411 SELECTED HRSL410 > > > > JSWK411 SELECTED HSWK410 > > > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCPT411 > > > > > > > > ENTRY ENTRY ENTRY CURRENT > > > > TYPE NAME STATUS RMID COMMENTS > > > > > > > > DDDEF AIEALNKE REQUIRED REQUIRED IN > > > > TARGET AND > > > > DISTRIBUTION ZONE > > > > DDDEF SIEALNKE REQUIRED REQUIRED IN > > > > TARGET ZONE > > > > PROGRAM GSKC31F SELECTED UA76980 > > > > PROGRAM GSKC64F SELECTED UA76980 > > > > PROGRAM GSKSUS31 SELECTED JCPT411 > > > > PROGRAM GSKSUS64 SELECTED JCPT411 > > > > PROGRAM GSKS31F SELECTED UA79715 > > > > PROGRAM GSKS64F SELECTED UA79715 > > > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JCRY741 > > > > > > > > ENTRY ENTRY ENTRY CURRENT > > > > TYPE NAME STATUS RMID COMMENTS > > > > > > > > DDDEF ACDSHFS REQUIRED REQUIRED IN > > > > TARGET AND > > > > DISTRIBUTION ZONE > > > > DDDEF SCDSHFS REQUIRED REQUIRED IN > > > > TARGET ZONE > > > > HFS CDSLM036 SELECTED JCRY741 > > > > HFS CDSLM037 SELECTED JCRY741 > > > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JRSL411 > > > > > > > > ENTRY ENTRY ENTRY CURRENT > > > > TYPE NAME STATUS RMID COMMENTS > > > > > > > > DDDEF AIEALNKE REQUIRED REQUIRED IN > > > > TARGET AND > > > > DISTRIBUTION ZONE > > > > DDDEF SIEALNKE REQUIRED REQUIRED IN > > > > TARGET ZONE > > > > PROGRAM GLDCLS31 SELECTED JRSL411 > > > > PROGRAM GLDCLS64 SELECTED JRSL411 > > > > BUILDMCS ENTRY SUMMARY REPORT FOR FMID JSWK411 > > > > > > > > ENTRY ENTRY ENTRY CURRENT > > > > TYPE NAME STATUS RMID COMMENTS > > > > > > > > DDDEF AIEALNKE REQUIRED REQUIRED IN > > > > TARGET AND > > > > DISTRIBUTION ZONE > > > > DDDEF SIEALNKE REQUIRED REQUIRED IN > > > > TARGET ZONE > > > > PROGRAM EUVFKDLC SELECTED JSWK411 > > > > PROGRAM EUVFKD6C SELECTED JSWK411 > > > > > > > > And the MCS from the new order is below: > > > > ++FUNCTION(JCPT411) > > > > DESC(z/OS Security Level 3 - System SSL Security Level 3) > > > > REWORK(2016064) > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > /*** THIS MCS FOR FUNCTION JCPT411 WAS CREATED BY THE BUILDMCS > > > ***/ > > > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ . > > > > ++VER(Z038) > > DELETE(JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291, > > > > > > > > > > JCPT3A1,JCPT3B1,JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT3 > > > > 91, > > > > JRSL151,JRSL161,JRSL171) FMID(HCPT410) REQ(UA76979,UA79714) > > > > SUP(AA42102, > > > > > > > > > > AA42605,AA42741,AA44467,AA44842,AA45216,AA45324,AA46489,AA46805,A > > > > A46960, > > > > > > > > > > AA47183,AA47405,AA47911,BA42102,BA42605,BA42741,BA44467,BA44842,B > > > > A45216, > > > > > > > > > > BA45324,BA46489,BA46805,BA46960,BA47183,BA47405,BA47911,CA44842,C > > > > A45216, > > > > > > > > > > CA45324,JCML121,JCML125,JCPT2A1,JCPT271,JCPT281,JCPT291,JCPT3A1,JCP > > > > T3B1, > > > > > > > > > > JCPT3C1,JCPT3D1,JCPT321,JCPT341,JCPT361,JCPT381,JCPT391,JRSL151,JRSL1 > > > > 61, > > > > > > > > > > JRSL171,UA69053,UA70216,UA70897,UA72957,UA73465,UA74564,UA74623,U > > > > A75543, > > > > UA76259,UA76422,UA76980,UA77326,UA79715). > > > > ++IF FMID(JCPT41J) THEN REQ(UA74371). > > > > ++IF FMID(HCPT420) THEN REQ(UA79716). > > > > ++IF FMID(JCPT421) THEN REQ(UA79718). > > > > ++PROGRAM(GSKC31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1) > > > > ) RMID(UA76980) SYSLIB(SIEALNKE). > > > > ++PROGRAM(GSKC64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1) > > > > ) RMID(UA76980) SYSLIB(SIEALNKE). > > > > ++PROGRAM(GSKSUS31) DISTLIB(AIEALNKE) > FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1)) SYSLIB(SIEALNKE). > > > > ++PROGRAM(GSKSUS64) DISTLIB(AIEALNKE) > FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1)) SYSLIB(SIEALNKE). > > > > ++PROGRAM(GSKS31F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1) > > > > ) RMID(UA79715) SYSLIB(SIEALNKE). > > > > ++PROGRAM(GSKS64F) DISTLIB(AIEALNKE) FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1) > > > > ) RMID(UA79715) SYSLIB(SIEALNKE). > > > > ++FUNCTION(JCRY741) DESC(z/OS Security Level 3 - OCSF Security > > > > ++Level > > > > ++3) > > > > REWORK(2016064) > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > /*** THIS MCS FOR FUNCTION JCRY741 WAS CREATED BY THE BUILDMCS > > > ***/ > > > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ . > > > > ++VER(Z038) DELETE(JCRY2A6,JCRY276,JCRY286,JCRY296) > FMID(HCRY740) > > > > SUP( > > > > JCRY2A6,JCRY276,JCRY286,JCRY296). > > > > ++HFS(CDSLM036) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS) > > > NUMBER(1) > > > > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM( > > > > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmmanp_sl3.dll') > > > > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmmanp.dll', > > > > '../../../../usr/lib/cssmmanp.dll') SYMPATH('cssmmanp_sl3.dll', > > > > '../../usr/lpp/ocsf/lib/cssmmanp_sl3.dll') . > > > > ++HFS(CDSLM037) DISTLIB(ACDSHFS) FROMDS(DSN(CDS.ACDSHFS) > > > NUMBER(1) > > > > VOL(ULEB2F) UNIT(3390)) SYSLIB(SCDSHFS) BINARY PARM( > > > > PATHMODE(0,7,5,5),APF,PROGCTL) LINK('../lib/cssmusep_sl3.dll') > > > > SYMLINK( '../../../../usr/lpp/ocsf/lib/cssmusep.dll', > > > > '../../../../usr/lib/cssmusep.dll') SYMPATH('cssmusep_sl3.dll', > > > > '../../usr/lpp/ocsf/lib/cssmusep_sl3.dll') . > > > > ++FUNCTION(JRSL411) > > > > DESC(z/OS Security Level 3 - IBM TDS for z/OS Security Level 3) > > > > REWORK(2016064) > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > /*** THIS MCS FOR FUNCTION JRSL411 WAS CREATED BY THE BUILDMCS > > > ***/ > > > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ . > > > > ++VER(Z038) > > > > ++DELETE(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361,JRSL363, > > > > JRSL381) FMID(HRSL410) > > > > SUP(JRSL3A1,JRSL3B1,JRSL3C1,JRSL3D1,JRSL361, > > > > JRSL363,JRSL381). > > > > ++PROGRAM(GLDCLS31) DISTLIB(AIEALNKE) > FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1)) SYSLIB(SIEALNKE). > > > > ++PROGRAM(GLDCLS64) DISTLIB(AIEALNKE) > FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1)) SYSLIB(SIEALNKE). > > > > ++FUNCTION(JSWK411) > > > > DESC(z/OS Security Level 3 - Network Authentication Srv Security > > > > L3) > > > > REWORK(2016064) > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > /*** THIS MCS FOR FUNCTION JSWK411 WAS CREATED BY THE BUILDMCS > > > ***/ > > > > /*** COMMAND ON 2016064 FROM TARGET ZONE MVST100 ***/ > > > > > > > > > > /**************************************************************** > > > > **/ > > > > > > > > > > /**************************************************************** > > > > **/ . > > > > ++VER(Z038) > > > > DELETE(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1,JSWK321,JSWK341, > > > > JSWK361,JSWK391) FMID(HSWK410) > > > > SUP(JSWK3A1,JSWK3B1,JSWK3C1,JSWK3D1, > > > > JSWK321,JSWK341,JSWK361,JSWK391). > > > > ++PROGRAM(EUVFKDLC) DISTLIB(AIEALNKE) > FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1)) SYSLIB(SIEALNKE). > > > > ++PROGRAM(EUVFKD6C) DISTLIB(AIEALNKE) > FROMDS(DSN(SYS1.AIEALNKE) > > > > NUMBER(1)) SYSLIB(SIEALNKE). > > > > > > > > > > > > Dave Gibney > > > > Information Technology Services > > > > Washington State University > > > > > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > > send email to [email protected] with the message: INFO > > > > IBM-MAIN > > > > > > -------------------------------------------------------------------- > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO > > > IBM-MAIN > > > > > > This e-mail transmission contains information that is confidential and > > > may be > > > privileged. It is intended only for the addressee(s) named above. If you > > receive > > > this e-mail in error, please do not read, copy or disseminate it in > > > any manner. If you are not the intended recipient, any disclosure, > > > copying, distribution or use of the contents of this information is > > > prohibited. Please reply to the message immediately by informing the > > > sender that the message was misdirected. After replying, please > > > erase it from your computer system. Your assistance in correcting > > > this error is > > appreciated. > > > > > > -------------------------------------------------------------------- > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO > > > IBM-MAIN > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to [email protected] with the message: INFO IBM-MAIN > > > > This e-mail transmission contains information that is confidential and may > > be > > privileged. It is intended only for the addressee(s) named above. If you > receive > > this e-mail in error, please do not read, copy or disseminate it in > > any manner. If you are not the intended recipient, any disclosure, > > copying, distribution or use of the contents of this information is > > prohibited. Please reply to the message immediately by informing the > > sender that the message was misdirected. After replying, please erase > > it from your computer system. Your assistance in correcting this error is > appreciated. > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > [email protected] with the message: INFO IBM-MAIN > > This e-mail transmission contains information that is confidential and may be > privileged. It is intended only for the addressee(s) named above. If you > receive > this e-mail in error, please do not read, copy or disseminate it in any > manner. If > you are not the intended recipient, any disclosure, copying, distribution or > use of > the contents of this information is prohibited. Please reply to the message > immediately by informing the sender that the message was misdirected. After > replying, please erase it from your computer system. Your assistance in > correcting this error is appreciated. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
