Well thought out! And agreed. Maybe John Eels can take it up with the appropriate development groups.
Atta Girl! -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Barbara Nitz Sent: Wednesday, May 30, 2018 4:29 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: HWIBCPII <warning - long post> We had the (admittedly not so) bright idea to accomate the request from application development to activate the HEAPCHK LE Option generally. We did this in conjunction with upgrading from 2.1 to 2.3. As a result, the crappy design of HWIBCPII address space revealed itself. (It had been running without problems under 2.1 for quite a while.) During IPL (and *waaaay before* JES2 was active) we got these messages: IEC141I 013-C8,IGG0193K,IEESYSAS,HWIBCPII,CEEDUMP IEC141I 013-C8,IGG0193K,IEESYSAS,HWIBCPII,SYSOUT CEE3798I ATTEMPTING TO TAKE A DUMP FOR ABEND U4087 TO DATA SET: BCPII.D146.T1123091.HWIBCPII Why is this thing even coming up when it relies on JES2? Why doesn't it wait for JES2?!? CEA0603I The z/OS Diagnostic Snapshot option failed. z/OS component CEA is unavailable for processing this request. Diagnostic data will be missing for the following incident with: DUMP TITLE: JOBNAME HWIBCPII STEPNAME HWIBCPII USER 4087 DATE AND TIME: 05/26/2018 11:23:09 DUMP DATA SET NAME: BCPII.D146.T1123091.HWIBCPII REASON: The CEA address space is unavailable. We do NOT run z/OSMF and we do NOT have CEA configured. Which component automatically calls CEA and then screams that it is not available? *Then* insult gets added to injury: ICH408I USER(BCPII ) GROUP($STCGRP ) NAME(BCPII ) SYS1.MCAT.xxxxxx CL(DATASET ) VOL(AWECAT) INSUFFICIENT ACCESS AUTHORITY FROM SYS1.MCAT.xxxxxx (G) ACCESS INTENT(UPDATE ) ACCESS ALLOWED(READ ) IKJ56893I DATA SET BCPII.D146.T1123091.HWIBCPII NOT ALLOCATED+ Of course not! We do not allow access to the master cat for every Tom, Dick and Harry to pollute the master cat with non-defined HLQs. The HLQ BCPII (which is equal to the protected STC userid HWIBCPII runs under) does not have an alias and is not allowed to allocate data sets. *That's* why the LE Option DYNDUMP clearly specifies a general HLQ named TDUMP for each and every transaction dump to get allocated under. IBM in their infinite wisdom have choosen to override the installation-set DYNDUMP LE Default (that only makes sense for actual TSO users, but NOT for LE-enabled STCs, namely to use the userid as HLQ) to enforce the IBM default for HLQs. For security reasons, no protected STC is allowed to allocate data sets under it's own userid, hence HLQ TDUMP to actually *find* all of those transaction dumps in one place. IEA820I TRANSACTION DUMP REQUESTED BUT NOT TAKEN AUTOMATIC ALLOCATION OF DUMP DATA SET FAILED CEE3796I AN ATTEMPT TO DYNAMICALLY TAKE A DUMP WAS NOT SUCCESSFUL. 339 THE ERROR RETURN CODE WAS 00000008 AND THE REASON CODE WAS 00000026. CEE0374C CONDITION=CEE3250C TOKEN=00040CB2 61C3C5C5 00000001 344 WHILE RUNNING PROGRAM CEEBPCAL WHICH STARTS AT 0000F600 AT THE TIME OF INTERRUPT CEE0374C CONDITION=CEE3250C TOKEN=00040CB2 61C3C5C5 00000002 355 WHILE RUNNING PROGRAM CEEPIPI AT THE TIME OF INTERRUPT HWI018I THE BCPII COMMUNICATION RECOVERY HAS DETECTED AN UNEXPECTED ERROR. SYSOUT MAY CONTAIN DIAGNOSTICS FOR THIS PROBLEM. HWI008I BCPII FAILED TO CONNECT TO THE LOCAL CENTRAL PROCESSOR 367 COMPLEX (CPC). RC = 00000FFF, RSN = 00000000. BCPII INITIALIZATION IS HALTED. When we migrated to 2.3, we didn't have a clue what might be wrong with HWIBCPII, so after the system was up and running we just did a "start HWISTART". To our utter confusion, *now* it came up without a hitch. We later found out why setting HEAPCK globally wasn't a good idea and have now turned it off again. When we reproduced this on our test system, we did an S HWISTART,SUB=MSTR on the assumption that the thing runs sub=mstr when it gets started. We got a dump (abend042 with a 'severe internal error' reason code) for our pains, so quite obviously it does not work under sub=mstr. Starting it under JES, *now* it waits for JES to initialize, probably because something global in the system recognizes that JES2 isn't there yet. There are a number of things wrong here: 1. If HWIBCPII needs JES2 to function (and obviously it does), it just cannot do all the shenanigans detailed above and *has to* wait for JES2 to come up. If it cannot do that, then it MUST work under the master subsystem. The wishy-washy way it behaves now is not acceptable. 2. Since this is an LE-enabled application, it MUST be able to tolerate all and any LE options set in an installation. Given that it overrides a number of the installation-set LE Options, why doesn't it also override the HEAPCHK option to always be off? 3. No STC running with a protected user should ever be able to allocate data sets under its own userid (or so our auditors tell us). That why it is *bad* design to override the DYNDUMP option that names the HLQ for transaction dumps, especially when running in a system address space deeply entrenched in z/OS. Thanks for letting me vent! Regards, Barbara ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN