Re: IBM TCPIP TELNET LINEMODE
Kevin, I assume by TN3270 TELNET you are referring to the TN3270 Telnet Server as documented in Chapter 13 of the z/OS 1.7 CS IP Configuration Reference manual.[1]. Are there perhaps some undesirable characters present also with the text asking for the application name? I would expect so. It's evident from the text asking for a password that you are receiving a 3270 data stream - the initial 5, for example, is the Erase/Write command. The BIND image which you have presented to TSO has persuaded TSO that you are using programming/microcode capable of presenting a 3270 data stream rather than SNA character string (SCS) which is required for basic TELNET operation - also called linemode. The BIND image is obtained from the content of the mode table entry under a particular mode name. The name of the mode table entry, the mode name, which is used by default - and there's almost no reason to change it - is INTERACT, the very first entry in the IBM-supplied mode table which is even more than a default mode table in that it is automatically considered to be concatenated after any customized mode table which is defined with the, in this case, APPL statements representing the secondary LU associated with the TELNET connection. In the statements which control the TN3270 Telnet Server in the CS IP PROFILE (or equivalent if the stand-alone version of the server is used), INTERACT is the mode name specified for use when the TN3270 client specifies that the device type LINEMODE. According to your post, your TN3270 client has specified LINEMODE and your NETSTAT output shows mode name INTERACT. The only conclusion I can reach is that your VTAM folk have managed to redefine the mode name INTERACT so that TSO imagines it can use a 3270 data stream when it receives the BIND image defined under mode name INTERACT. I suggest you get your network guy, who I imagine is your VTAM guy ,and ask him to sort it out using, to be sure he sees the problem clearly, NetView Session Monitor trace data. If the solution is still not clear, please post again preferably with hexadecimal of the BIND request used for the TSO session which is easily obtained from NetView Session Monitor. Chris Mason [1] This deals with Tony Harminc's point about TN3270 not being appropriate for LINEMODE. I fell into this trap a little while back and was politely requested to go and look what the CS IP folk called their old TELNET server these days. - Original Message - From: Klein, Kevin [EMAIL PROTECTED] Newsgroups: bit.listserv.ibm-main To: IBM-MAIN@BAMA.UA.EDU Sent: Monday, 01 May, 2006 11:26 PM Subject: IBM TCPIP TELNET LINEMODE We're doing a POC on a new product that requires a TN3270 TELNET connection to z/OS 1.7 in LINEMODE protocol. I have virtually no experience with TCPIP and our network guy hasn't had much to do with any LINEMODE applications. When we execute the open command in the telnet session, it comes back asking for an application name: Application Required. No Installation Default Enter Application Name: I enter an application name, in this case TSO, and receive this line: 5A)? ?HIKJ56700A ENTER USERID -? A1B It only gets worse from there. Does anyone know of a solution that will get rid of the garbage characters I'm receiving? I've been searching manuals to no avail. NETSTAT display shows I am in LINEMODE using logmode INTERACT. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Cant find reason code root syt
Well that doesn't make a whole lotta sense - try; and have that root mounted elsewhere. (probably in READ mode) Shane ... Sounds like you aren't using shared HFS, and have that root mounted SHR elsewhere. If you are trying to mount it as R/W so you can do some maint, it won't work. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IBM TCPIP TELNET LINEMODE
Tony, I think you misunderstood - again because of the (IMHO rather silly) naming of the CS IP TELNET as the TN3270 Telnet Server. It's evident that Kevin is using a regular TELNET client and he's seeing - as much as he can - a 3270 data stream. The TN3270 Telnet Server is quite capable - despite the name it has now been given - of supporting regular line-by-line Telnet clients. Actually, rereading Kevin's post and yours I wonder if I have misunderstood the client and server aspects. I don't believe I have misunderstood the issue of the apparently strange characters however. Chris Mason [1] Although not VT100 I believe. - Original Message - From: Tony Harminc [EMAIL PROTECTED] Newsgroups: bit.listserv.ibm-main To: IBM-MAIN@BAMA.UA.EDU Sent: Monday, 01 May, 2006 11:48 PM Subject: Re: IBM TCPIP TELNET LINEMODE Klein, Kevin wrote: We're doing a POC on a new product that requires a TN3270 TELNET connection to z/OS 1.7 in LINEMODE protocol. These two don't really go together. Either you are running TN3270 or plain telnet. A few clients will do both, e.g. IBM's mainframe-based ones, and there is a negotiation phase when you could say that TN3270 is in line mode, but it doesn't last long. I enter an application name, in this case TSO, and receive this line: 5A)? ?HIKJ56700A ENTER USERID -? A1B It only gets worse from there. Does anyone know of a solution that will get rid of the garbage characters I'm receiving? I'd say get a better product for your POC. [Is this one of those lame password-sync products that wants to telnet in to change and provision users via TSO? In that case I'd say you should buy ours instead. :-)] But seriously, I think you need to use a telnet rather than a TN3270 client. I don't get any garbage characters using (free) PuTTY, but I understand some versions of Windows telnet have all sorts of problems. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ICSF Keys
Ward, Mike S wrote: Hello all, I have a question. When I generated my data encryption keys under ICSF the panels didn't require an entry to designate whether they were 3DES, DES or AES encryption keys. How does one know what kind of key was generated? Or does it matter? Do you mean KGUP ? The length of the key depends on the LENGTH() parameter. However, sometimes you provide key value (clear or encrypted) - in that case the value provided implicitly sets key length. AFAIR all the keys are DES keys, since AES (on mainframe) supports only clear keys - encryption is done by CPACF or by ICSF software. -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: intermittently session failure
i did some modification in the routers but still we have the problem. i noticed that if the the line quality is not good, the session dropped. in the past, the NCP can handle the unstablity of the the line. i don 't know excactly how it can synchronise with the speed of modem(the modem decreases from 24k to 9.6 k). From: Chris Mason [EMAIL PROTECTED] Reply-To: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU To: IBM-MAIN@BAMA.UA.EDU Subject: Re: intermittently session failure Date: Mon, 24 Apr 2006 14:50:54 +0200 Abdullah, Please post the NCP definition of a typical 3174, that is the GROUP, LINE and PU statements (don't bother about LU statements). Also post the specifications you have used with your Cisco machine software - is it SNASw with DLSw+ perhaps? I assume the 3274 control units worked quite happily with NCP/3745 so the 3174 customization is perfectly usable. It may be that the idle polling from the primary side, the Cisco machine, is too infrequent. Chris Mason - Original Message - From: Abdullah AlShaalan [EMAIL PROTECTED] Newsgroups: bit.listserv.ibm-main To: IBM-MAIN@BAMA.UA.EDU Sent: Monday, 24 April, 2006 12:14 PM Subject: intermittently session failure i migrate remote 3174 to CISCO router in place of 3745. we have a problem that some control units timed out and disconnect then connect each 5 seconds. the control unit is connected thru modem to serial interface. the interface configured as SDLC. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html _ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SYS1.PARMLIB(PROG00) vs. RACF DSMON Report
Hi Doc, Yes. You can add APF or LNKLST libraries active which are not listed anywhere in PARMLIB. There is the MVS operator command SETPROG APF/LNKLST. There are also macro interface CSVAPF/CSVDYNL that authorized programs could be written to use locally or invoked by vendor code. The most likely vendor tools are the MVS monitors like TMONMVS and others that provide an easy to use full screen interface to make changes to APF or LNKLST. Best Regards, Sam Knutson, GEICO Performance and Availability Management mailto:[EMAIL PROTECTED] (office) 301.986.3574 If guns are outlawed, can we use swords? -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Doc Farmer Sent: Tuesday, May 02, 2006 12:31 AM To: IBM-MAIN@BAMA.UA.EDU Subject: SYS1.PARMLIB(PROG00) vs. RACF DSMON Report Greetings! Odd question. Is it possible to have APF/LNKLST libraries reported or locatable by the RACF DSMON (Data Security Monitor) report, but not listed in the SYS1.PARMLIB(PROG00) member? I ran a comparison between the two and found three libraries on DSMON that weren't in the PROG00, and 16 LNKLST libraries in PROG00 that were not found on the DSMON report. The system is IPL'd daily, so I'm not sure if there is a separate mechanism to activate APF or LNKLST libraries outside the SYS1.PARMLIB process. I'm also unsure of the security implications regarding such a mis-match. I'm cross-posting this over at RACF-L, but I just wanted to see what the sysprogs here have to say on the subject. Many thanks. Doc Farmer This email/fax message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email/fax is prohibited. If you are not the intended recipient, please destroy all paper and electronic copies of the original message. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
-Original Message- From: IBM Mainframe Discussion List On Behalf Of Paul Gilmartin In a recent note, Chase, John said: You might look into a DFSMSdss job to DUMP those datasets to a DUMMY output with PURGE; e.g.: //DELETE EXEC PGM=ADRDSSU Would this be a good application of PARM='TYPRUN=NORUN', as Greg Shirey suggested when I asked a similar question lately? Linkname: Re: List contents of DFSMSdss-produced dump? URL: http://bama.ua.edu/cgi-bin/wa?A2=ind0603L=ibm-mainD=1O=DP=139169 Yes; PARM='TYPRUN=NORUN' will cause ADRDSSU to list all the datasets it would process without actually processing any of them. -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
On Monday 01 May 2006 23:28, Joel C. Ewing wrote: Several potential problems with the suggested DFDSS approach: DFDSS will only find datasets on primary volumes - any datasets migrated to ML1 or ML2 will be ignored and not deleted. Agreed Although the indicated job will not actually write any data to the DUMMY output dataset, the DFDSS DUMP will still incur the overhead of reading through all data of the datasets being deleted. Are you sure? The TOL(ENQF) should become a problem (delete failure) when it is time for the DELETE to occur if any other address space has the dataset enqueued. TOL(ENQF) is a mistake, it shouldn't have been in John's example If there are not that many datasets and migration is a possibility, I would be tempted to look for some BATCH REXX approach with LISTC and DEL, which would handle migrated datasets. If there were 5K+ datasets involved, using the Catalog Search Interface to identify the datasets rather than LISTC would take more work but would be considerably more efficient. You're pretty much describing the XDELETE exec which is distributed in file 183 of the CBT tape - http://gsf-soft.com/Freeware/ In the same place, you'll find XRENAME to rename data sets en masse -- Gilbert Saint-Flour GSF Software http://gsf-soft.com/ mailto:[EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
New CICS Statements of Direction
Some new CICS statements of direction announced today: http://www.ibm.com/common/ssi/rep_ca/6/897/ENUS206-096/ENUS206-096.PDF Almost everything has to do with SOA (Service Oriented Architecture). - - - - - Timothy F. Sipples Consulting Enterprise Software Architect, z9/zSeries IBM Japan, Ltd. E-Mail: [EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IEC141I 013-C0 during SUBSYS open
Yes, I've got the Open and the Close to work. [It was truly amazing to see a totally different ACB for Close from the one passed for Open] I am now debugging the Get/Put routine. Of course, this would be much easier if, instead of producing and eyeballing the dumps, I had an interactive debugger, like XDC, which ADP is licensed to run, just not on the sand-box system I am using. -Victor- On Mon, 1 May 2006 22:26:55 -0500, Tom Schmidt [EMAIL PROTECTED] wrote: Victor, So does it work now? -- Tom Schmidt Madison, WI -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
This works great. Once again thanks all. Group is great. Bob Pelletier Connecticut Student Loan Foundation Rocky Hill, Connecticut. -Original Message- From: Chase, John [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 02, 2006 8:17 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.* -Original Message- From: IBM Mainframe Discussion List On Behalf Of Paul Gilmartin In a recent note, Chase, John said: You might look into a DFSMSdss job to DUMP those datasets to a DUMMY output with PURGE; e.g.: //DELETE EXEC PGM=ADRDSSU Would this be a good application of PARM='TYPRUN=NORUN', as Greg Shirey suggested when I asked a similar question lately? Linkname: Re: List contents of DFSMSdss-produced dump? URL: http://bama.ua.edu/cgi-bin/wa?A2=ind0603L=ibm-mainD=1O=DP=139169 Yes; PARM='TYPRUN=NORUN' will cause ADRDSSU to list all the datasets it would process without actually processing any of them. -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PDSEs in LNKLST at IPL can't be deleted
Mark, Follow this thread backwards to learn about the DFSMS 'global connect' prohibiting the deletion of a PDSE LNKLST'd at IPL. Also pay attention to the warnings mentioned by many, know the environment you're doing this, etc. Paul -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SYS1.PARMLIB(PROG00) vs. RACF DSMON Report
In regards to ... not listed in the SYS1.PARMLIB(PROG00)... Are you sure you're looking at the appropriate PROGxx member(s) of parmlib as specified by the PROG parameter in IEASYSxx and/or are you sure you're looking at the entire parmlib concatenation as specified by the PARMLIB statement(s) in LOADxx? Regards, Kevin -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Doc Farmer Sent: Monday, May 01, 2006 9:31 PM To: IBM-MAIN@BAMA.UA.EDU Subject: SYS1.PARMLIB(PROG00) vs. RACF DSMON Report Greetings! Odd question. Is it possible to have APF/LNKLST libraries reported or locatable by the RACF DSMON (Data Security Monitor) report, but not listed in the SYS1.PARMLIB(PROG00) member? I ran a comparison between the two and found three libraries on DSMON that weren't in the PROG00, and 16 LNKLST libraries in PROG00 that were not found on the DSMON report. The system is IPL'd daily, so I'm not sure if there is a separate mechanism to activate APF or LNKLST libraries outside the SYS1.PARMLIB process. I'm also unsure of the security implications regarding such a mis-match. I'm cross-posting this over at RACF-L, but I just wanted to see what the sysprogs here have to say on the subject. Many thanks. Doc Farmer -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
Actually I thought the same thing about reading all the input datasets so I tried an experiment on it. I copied 4 datasets to 2 new packs (about 4000 cylinders of MXG monthly PDB datasets) and the copy took about 10 minutes wall time and consumed about 1 EXCPs to create these 4 datasets. I then ran the DUMP with the output to DD DUMMY and the entire thing consumed 161 EXCPs and ran in 1 second wall clock time. So apparently DFDSS is smart enough to not copy data that is going to DD DUMMY. Rex -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Joel C. Ewing Sent: Monday, May 01, 2006 10:28 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.* Glen.Gasior wrote: I would not assume the search done by ISPF is the same as the search done by DFSMSDSS. ISPF will search through all catalogs and not limit itself to the standard catalog search if there is a wildcard in the first hlq. I do not know about DFSMSDSS. You may need to know the details of each search algorithm to know if they are equivalent. Several potential problems with the suggested DFDSS approach: DFDSS will only find datasets on primary volumes - any datasets migrated to ML1 or ML2 will be ignored and not deleted. Although the indicated job will not actually write any data to the DUMMY output dataset, the DFDSS DUMP will still incur the overhead of reading through all data of the datasets being deleted. The TOL(ENQF) should become a problem (delete failure) when it is time for the DELETE to occur if any other address space has the dataset enqueued. If there are not that many datasets and migration is a possibility, I would be tempted to look for some BATCH REXX approach with LISTC and DEL, which would handle migrated datasets. If there were 5K+ datasets involved, using the Catalog Search Interface to identify the datasets rather than LISTC would take more work but would be considerably more efficient. -- Joel C. Ewing, Fort Smith, AR[EMAIL PROTECTED] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
Question about TAPE1 dump output file. If you wrote it to some DASD and a week later you wanted to list the contents, the files contained in that dump, but NOT restore any. Say you want only one but you want a list to choose from. How do you do that? Thanx, John :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
The DFDSS reference manual indicates that running a RESTORE of the entire output file but putting TYPRUN=NORUN in the PARM field of the EXEC should accomplish what you want. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of John M. Cullen Sent: Tuesday, May 02, 2006 9:50 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.* Question about TAPE1 dump output file. If you wrote it to some DASD and a week later you wanted to list the contents, the files contained in that dump, but NOT restore any. Say you want only one but you want a list to choose from. How do you do that? Thanx, John :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: SYS1.PARMLIB(PROG00) vs. RACF DSMON Report
Odd question. Is it possible to have APF/LNKLST libraries reported or locatable by the RACF DSMON (Data Security Monitor) report, but not listed in the SYS1.PARMLIB(PROG00) member? Sure. Anything that was added dynamically is not going to show up in your PROG member. You can add both APF and linklist libraries via the SETPROG command and there are CSV* macro interfaces that vendor tools can (and many do) use for the same purpose. The system is IPL'd daily, so I'm not sure if there is a separate mechanism to activate APF or LNKLST libraries outside the SYS1.PARMLIB process. You mean outside of NIP processing? Sure there is. The obvious place to look would be in IEACMDxx and/or COMMNDxx. Look for SETPROG commands being issued during the IPL. Browse the log from early initialization onward and you will probably see who/what is doing it. I'm also unsure of the security implications regarding such a mis-match. Probably none to be concerned with beyond the simple issue of not having a complete grasp of what is going on during or after IPL. You cannot get a dataset into the APF list, or linklist without being authorized. The fact you're seeing them there means than an authorized task or command did it. For completeness, you may want to track down how and why this is occurring, but it is probably no big deal - unless it turns out that the dataset(s) in question really shouldn't be there :-) CC -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Batch JCL on Windows/.NET ???
If it's the one I'm thinking of, it did exist. I remember seeing it in 1988? or was it 1989? on a VM/CMS system that was connected to BITNET. It was a REXX that, when ran, print out an text graphic to the users screen, while mailing itself to everyone in your namesfile. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Behalf Of Hal Merritt Sent: Monday, May 01, 2006 2:58 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Batch JCL on Windows/.NET ??? I have been curious about this so called Christmas Tree Virus for many years. I hear it mentioned, but have never been able to verify it as a real event or urban legend. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hare Sent: Friday, April 28, 2006 10:40 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Batch JCL on Windows/.NET ??? Now you can get JCL errors AND viruses right on the same machine. You always could - ex: the Christmas Tree Virus which was probably more of a worm on VM/Profs which I'm sure affected some machines with MVS guests (and it's old enough that it was called MVS then I believe, possibly MVS/XA or /ESA but still MVS). It's just a lot harder to do, and a LOT harder to infect the operating system itself. Applications, however, are probably easier. Tim Hare Senior Systems Programmer Florida Department of Transportation (850) 414-4209 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ** The information contained in this message, including attachments, may contain privileged or confidential information that is intended to be delivered only to the person identified above. If you are not the intended recipient, or the person responsible for delivering this message to the intended recipient, ALLTEL requests that you immediately notify the sender and asks that you do not read the message or its attachments, and that you delete them without copying or sending them to anyone else. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
Is HiperBatch a paid feature? Jon snip I have seen the posts mentioning HiperBatch but I would have thought that BatchPipes would have given you the same performance benefit if not better. BatchPipes is a paid feature I believe though. /snip -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IBM TCPIP TELNET LINEMODE
Thanks very much for your help Chris. You nailed it. The INTERACT logmode was redefined somewhere in our distant past and carried forward till now. Removing it fixed this problem. I think the person that changed it 15-20 years ago is now my V.P., so that's all I got to say about that. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Behalf Of Chris Mason Sent: Tuesday, May 02, 2006 1:31 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: IBM TCPIP TELNET LINEMODE The only conclusion I can reach is that your VTAM folk have managed to redefine the mode name INTERACT so that TSO imagines it can use a 3270 data stream when it receives the BIND image defined under mode name INTERACT. - Original Message - From: Klein, Kevin [EMAIL PROTECTED] Newsgroups: bit.listserv.ibm-main To: IBM-MAIN@BAMA.UA.EDU Sent: Monday, 01 May, 2006 11:26 PM Subject: IBM TCPIP TELNET LINEMODE We're doing a POC on a new product that requires a TN3270 TELNET connection to z/OS 1.7 in LINEMODE protocol. I have virtually no experience with TCPIP and our network guy hasn't had much to do with any LINEMODE applications. When we execute the open command in the telnet session, it comes back asking for an application name: Application Required. No Installation Default Enter Application Name: I enter an application name, in this case TSO, and receive this line: 5A)? ?HIKJ56700A ENTER USERID -? A1B It only gets worse from there. Does anyone know of a solution that will get rid of the garbage characters I'm receiving? I've been searching manuals to no avail. NETSTAT display shows I am in LINEMODE using logmode INTERACT. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html # Attention: The information contained in this message and or attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any system and destroy any copies. # -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
John, I pondered this for quite some time and I think I have the answer for you: It depends :) Ron -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Chase, John Sent: Monday, 1 May 2006 9:46 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Dataset Contention Hi, All, The following question was posed in our shop recently: How many jobs can access a DISK DSN with a DISP=SHR before any performance degradation occurs due to access contention? Meaning, We have 1 dataset sitting on disk, we have 35 jobs that need to access this one dataset, how many jobs can run at one time accessing this one dataset before the access creates contention and stops jobs from running? All of the access would be read-only, and AFAIK the dataset is non-VSAM. TIA, -jc- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
There is not enough information in your question for a reasonable answer, IMHO. Missing, for example, is the number of LPARs and how the 'plex is configured. Also missing is the specific DASD hardware as well as competing workloads (other datasets on that same unit and the cache hit rate on that specific extent of that volume). Even with that information, the equations are complex. One or more very high performance jobs (ADRDSU, for example) on an LPAR can dominate the unit and degrade performance to the perception of 'stopped'. The SWAG ROT is that there is no free lunch, and each additional job will degrade performance to some degree. The first few may not be measurable. The degradation may follow a classic 'knee curve' (rise slowly to a point then abruptly get much worse). Degradation to the point of a perceived job *stoppage* is not likely. Degradation to a point of unacceptable run times is the expected result. HTH and good luck. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Chase, John Sent: Monday, May 01, 2006 8:46 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Dataset Contention Hi, All, The following question was posed in our shop recently: How many jobs can access a DISK DSN with a DISP=SHR before any performance degradation occurs due to access contention? Meaning, We have 1 dataset sitting on disk, we have 35 jobs that need to access this one dataset, how many jobs can run at one time accessing this one dataset before the access creates contention and stops jobs from running? All of the access would be read-only, and AFAIK the dataset is non-VSAM. TIA, -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
On Tue, 2 May 2006 11:48:42 -0400, Jon Brock wrote:
Is HiperBatch a paid feature?
Jon
snip
I have seen the posts mentioning HiperBatch but I would have thought
that BatchPipes would have given you the same performance benefit if not
better. BatchPipes is a paid feature I believe though.
/snip
The HiperBatch components are part of the z/OS license ('free').
--
Tom Schmidt
Madison, WI
(about 15+ years ago my then-organization assisted IBM in finding the bugs
in the VSAM portion of HiperBatch... but what are 20-30 APARs among
friends? The 'seamless' transition over the 2GB boundary of the VSAM files
was rather seamy (or unseemly) when first shipped.)
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
I know IBM does not generally publish numbers I've never understood that! We are trying to convince the world that the mainframe is not dead, and the main company that requIres it to continue does nothing to help! Tell us: How many mainframes are out there! Tell us how many companies/sites there are! Convince others that it is a viable platform! Get mainstream universities into the scholarship programme! My alma mater (University of Waterloo) is not even in it. IBM's support of the mainframe has been all lip service, sizzle and no steak! We cannot continue this way! IBM has to belly up to the bar and prove that they mean it! - -teD O-KAY! BLUE! JAYS! Let's PLAY! BALL! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
Actually, giving the question some serious consideration, at a reasonably good cache hit ratio the impact of an infinite number of jobs randomly reading the same dataset will not be significantly different to an infinite number of jobs accessing many datasets and volumes on the same shared channels. At high cache hit rates elongation usually comes about due to path busy, whether that be Pend for channel busy on ESCON, frame interleaving on FICON, or the effects of microprocessor utilisation at either end of the channel. For random access with poor cache hit ratios, or sequential read, the RAID scheme will have a much greater bearing on throughput, as will the scheme employed for pre-fetch in the case of sequential read. For Sequential read, good old RAID-1 is probably at the bottom of the pile in this case as it only employs two spindles, and the pre-fetch scheme used by the only MF RAID-1 vendor simply flip-flops between the spindles instead of pre-fetching from both concurrently. RAID-10 schemes that can pre-fetch from all the disks in parallel would be at the top, with RAID-5/6 not far behind and standard RAID-10 a bit behind RAID-5/6. For random it would pretty much depend on how many spindles can be used concurrently as one volume. RAID-10, RAID-5 and RAID-6 using eight drives would all have the same performance for a single dataset. The SWAG ROT is that there is no free lunch, and each additional job will degrade performance to some degree. The first few may not be measurable. The degradation may follow a classic 'knee curve' (rise slowly to a point then abruptly get much worse). Hiperbatch is a great tool, but last time I looked it did not support EFDS :( Pre-loading is not the only way to use Hiperbatch, as it has a great 'catch algorithm' that keeps track of the leading and following jobs allowing to get bursts of speed from the Hiperbatch buffer. The best way I have found to Hiperbatch without pre loading is to kick off all the jobs that will be using hiperbatch at the same time and give them the same service class. You want them to synchronise around the same area of the file so one job does the reading, and the rest are just behind reading from Hiperbatch. If some jobs are accessing too many different parts of the file then Hiperbatch does not work that well. Finally, if the datasets is 4-5GB and you want to have a ton of jobs read it as fast as possible, then on HDS storage consider putting the file in FlashAccess if you have HDS Arrays. This is functionally the same as Solid State Disk (remember those), and it won't matter what sort of disk and parity scheme you are using. Ron -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Securing consoles
Hi List, We have our z/OS consoles in a secure environment and a very small operations staff so we've never bothered setting up console logons. However, due to some coming changes, we will need to activate this. I have read the RACF security administrator's guide and it appears as though the activation is fairly straightforward. However, I have a question on how it actually works. From the system commands manual, it appears as though the operator remains logged on until a logoff command is issued. Is there any kind of inactivity timeout available for this? Being the operators are used to not logging on or off, my concern is they may log on at IPL time (about twice per year) and never log back off. Are there any gotcha's somebody could point out to me? TIA Rex -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Reading Variable record with bad BDW/RDW?
I don't know if any of the previous responses satisfied your need. Another approach would be to create a second DCB (PS, BSAM, RECFM=U, and BLKSIZE=32760). Open the DCB, read the first block, and close the DCB. Examine the data for whatever attributes you like (such as correct BDW and one or more correct RDWs). Set some flags (such as definitely not VB) and save some values (such as length of first block). After opening your primary DCB, check the fields that are filled in (such as DSORG, LRECL, BLKSIZE) for consistency with your flags and saved values. Not only will this let you catch the case you described (a PDS directory would not pass the BDW/RDW check) but possibly other user mistakes such as records larger than blocksize, FB blocksize (either DSCB or actual) not a multiple of LRECL, F or FB blocks shorter than LRECL, etc Thomas David Rivers [EMAIL PROTECTED] wrote: Hi Bill... Well - yes - you've hit the nail on the head - the routines are very confused because they are expecting to see VB-type records (with a BDW and RDW) and they are not. The program uses BSAM I/O. The issue here is that the program expects to not be directed to a PDS, and when that accidently happens - things go, as you mention, alarmingly wrong. What I'm looking for is some way for the program to say Hey! This isn't a sequentional VB file at all. Instead of miserably blowing up. As I mentioned before, I tried looking the DSORG in the DCB, but that indicates PS (because the PDS was opened with a PS DCB.) So - is there another way to tell if the file I'm trying to read with BSAM I/O (doing my own unblocking of the VB records) is at all reasonable? Someone else suggested using DYNALLOC to query the organization of the file before the OPEN... is there a way to accomplish this after the OPEN? Then - when the user points the program to a PDS instead of a nice sequential file (or PDS member), things don't just blow up, but can simply inform the user that is an invalid file. - Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Cant find reason code root syt
Thanks to all who replied. I'm just setting up GRS so I will check the include list. Dave From: IBM Mainframe Discussion List on behalf of Shane Ginnane Sent: Tue 5/2/2006 12:06 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Cant find reason code root syt Well that doesn't make a whole lotta sense - try; and have that root mounted elsewhere. (probably in READ mode) Shane ... Sounds like you aren't using shared HFS, and have that root mounted SHR elsewhere. If you are trying to mount it as R/W so you can do some maint, it won't work. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html IMPORTANT NOTICE This communication is confidential and is intended only for the use of the individual or entity to which it is addressed. This communication may contain information that is protected from disclosure by applicable law. If the recipient of this communication is not the intended recipient, or the employee or agent responsible for delivering this communication to the intended recipient, you are hereby notified that any dissemination, distribution or reproduction of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by telephone at 760-602-1400 and delete the communication from all email files. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
On Tue, 2 May 2006 10:23:52 -0700, Charles Mills wrote: I know IBM does not generally publish numbers, but does anyone have a good working guess they can share with me on the number of organizations worldwide using Z or 390 boxes? Something to the nearest thousand would be great. It's for a presentation to software people who are not familiar with our box. It's not the point of the presentation -- it's just for a no, the mainframe is not dead slide that is a footnote to the presentation's main point, which has nothing to do with choice of platforms. Consider the impact of LPARs VM and increasingly faster processors over the years. Consider also the number of oursourcing contracts signed by IBM, EDS, CSC (etc.) with companies over the past 20 years. I would not be at all surprised if the number of mainframes has gone DOWN (substantially down) over the past 20 years. In fact, I would be shocked if the number of mainframes in the field is anywhere near the number it was, say, 20 years ago. Perhaps you should rephrase the issue: What proportion of the worldwide business application computing is performed on a mainframe? Recall that IBM's stockholder reports laud the number of mainframe MIPS shipped (but not necessarily the number of mainframes themselves). Mainframes are the mass transit of computing. (Everybody's on an increasingly larger bus these days.) -- Tom Schmidt Madison, WI -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
I'm not sure I'd want to know. If it came down to say every one of the Fortune 5,000 (although some might have multiple sites) would you really consider it a selling point that there were only 5,000 shops left (or even 10,000) vs. the googolplex of wintel/*nix shops? Now saying that those same 5,000 shops process 90% of the revenue generating work vs. 10% for the googolplex of squatty boxes then that might be impressive. Ken Porowski -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
Do you actually have to have someone log on, or do you just need an ID for each console, so that secured commands work and you can audit where they came from? We used the DEFAULT LOGON(AUTO) so that each console logs on with a user ID equal to the console name. We did this for the reasons you stated - we figured the operators would log on once, anyway, and never log off. Even if they do log on and off, they will probably share IDs and passwords - anything to get the job done.So, the closest we could come to identifying the operator(s) that issued particular commands would be to know which console issued it, and what operators were in that physical area at the time (via door lock logs or whatever). The IDs are defined as protected in RACF so no one can log on with them via the usual methofs. They are also in a RACF group (imaginatively named OPCONSOL) so we can, if we wish, grant access to all the consoles at once. I didn't see a timeout value in the Quick-reference summary of the InitTuning info - but suspect that operators would find a way to keep the ID active by issuing meaningless commands once in a while. Tim Hare Senior Systems Programmer Florida Department of Transportation (850) 414-4209 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
Ron and Jenny Hawkins wrote: [...] Finally, if the datasets is 4-5GB and you want to have a ton of jobs read it as fast as possible, then on HDS storage consider putting the file in FlashAccess if you have HDS Arrays. This is functionally the same as Solid State Disk (remember those), and it won't matter what sort of disk and parity scheme you are using. Last but not least: dataset in DASD box cache can any type you want, while Hiperbatch is limited to SAM and ESDS (AFAIR) organizations. Ron, can you provide some operational details, how-to do it? Should I define a volume in cache ? Can I tell the machine this volume have to be whole in cache ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
Hi Tim. Good questions/comments. I would actually want them logging on to do their work. The area management is planning on moving the consoles to is (as far as I'm concerned) an unsecured area. People come into and out of this area on a regular basis with nobody seeing them. The idea mgmt has is that the operator will always be there so it will be secure, but we have 1 operator per shift and the printers and tape drives (not robotic) are located in the computer room so the operator will often be away from the console. As far as the operator issuing meaningless commands once in a while, that's OK because that means they're at the console. My biggest concern is when they're away from them that somebody could come in and cause considerable damage while they're unattended. That's why I am asking about the auto-logoff. I am OK with them even using a single ID for everybody. Rex -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hare Sent: Tuesday, May 02, 2006 2:32 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles Do you actually have to have someone log on, or do you just need an ID for each console, so that secured commands work and you can audit where they came from? We used the DEFAULT LOGON(AUTO) so that each console logs on with a user ID equal to the console name. We did this for the reasons you stated - we figured the operators would log on once, anyway, and never log off. Even if they do log on and off, they will probably share IDs and passwords - anything to get the job done.So, the closest we could come to identifying the operator(s) that issued particular commands would be to know which console issued it, and what operators were in that physical area at the time (via door lock logs or whatever). The IDs are defined as protected in RACF so no one can log on with them via the usual methofs. They are also in a RACF group (imaginatively named OPCONSOL) so we can, if we wish, grant access to all the consoles at once. I didn't see a timeout value in the Quick-reference summary of the InitTuning info - but suspect that operators would find a way to keep the ID active by issuing meaningless commands once in a while. Tim Hare Senior Systems Programmer Florida Department of Transportation (850) 414-4209 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Dataset Contention
One thing a co-worker found out a few years ago before I was here. You better put a cap on the amount of ESTOR that can be used for Hiperbatch! Which brings up a good point. If z/OS 1.x and running on in 64bit mode, can one use Hiperbatch? Doesn't Hiperbatch require Estor? [EMAIL PROTECTED] 5/2/2006 3:47:25 PM Ron and Jenny Hawkins wrote: [...] Finally, if the datasets is 4-5GB and you want to have a ton of jobs read it as fast as possible, then on HDS storage consider putting the file in FlashAccess if you have HDS Arrays. This is functionally the same as Solid State Disk (remember those), and it won't matter what sort of disk and parity scheme you are using. Last but not least: dataset in DASD box cache can any type you want, while Hiperbatch is limited to SAM and ESDS (AFAIR) organizations. Ron, can you provide some operational details, how-to do it? Should I define a volume in cache ? Can I tell the machine this volume have to be whole in cache ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
The Christmas Tree Virus
Hal Merritt wrote: I have been curious about this so called Christmas Tree Virus for many years. I hear it mentioned, but have never been able to verify it as a real event or urban legend. His use of so called is appropriate, Here, as elsewhere, it is important to try to avoid confounding malice and incompetence. This generic problem has a long history. The early, ca. 1965, versions of the SABRE airlines reservation system had a global-broadcast facility that permitted the text of a single message to be sent to all K known destinations. Intended for such uses as warning of an impending system shutdown, it might have been valuable and shoiuld have been innocuous; but it was neither. It was implemented by using the SABRE destinations table to construct K full copies of the message, one for each destination, each of which was then enqueued in the usual way for transmission. The resulting buffer [storage] shortage brought SABRE to its knees, and recovery was preternaturally slow. An alternatiive implementation that reused a single copy of the message text would have been innocuous, and that is the moral of this little story. Bad design can be as lethal as malign intent. John Gilmore Ashland, MA 01721-1817 USA _ On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
I don't know a way to automatically log a console off. However, what type of console is this? If it is really a PC, can't you have the screen saver lock the PC, requiring a password to unlock? -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
Charles Mills wrote: I know IBM does not generally publish numbers, but does anyone have a good working guess they can share with me on the number of organizations worldwide using Z or 390 boxes? Something to the nearest thousand would be great. I've heard about 10 000. I don't remember the source. However the number of sites is not major factor. The size is also very important. For example here, in Poland we have up to 100 sites, but only few over 1000 MIPS. Vast majority works on 250 MIPS machines. z/800's and 9672's are the most popular models in use. Even P390's are in use. Vast majority use z/OS, only few Linux in production (I know 4 sites), one site uses VM/CMS (not as hypervisor). No TPF AFAIK. BTW: I can provide the numbers for Poland. We have 4000+ subscribers on the list, from almost any country on the Earth. Why can't we collect the numbers if we want to know them ? A single volunteer from each country (or US state) is needed, and he needs to know some numbers about his neighbourhood. The plan is simple: 1. We should agree it is good idea. 2. We should provide some basic questions (number of sites, number of CPC's, etc.) 3. We should collect it. Duplicated entries from given country should be explained or averaged. 4. We should publish it. What do you think about it ? -- Radoslaw Skorupka Lodz, Poland -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
There is no auto-timeout feature that I am aware of. When I last implemented this, the advice to the operators was : you are responsible for anything that is entered while you are logged on. (This encouraged them to log off when they stepped away from the console). Don Imbriale -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Pommier, Rex R. Sent: Tuesday, May 02, 2006 3:54 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles Hi Tim. Good questions/comments. I would actually want them logging on to do their work. The area management is planning on moving the consoles to is (as far as I'm concerned) an unsecured area. People come into and out of this area on a regular basis with nobody seeing them. The idea mgmt has is that the operator will always be there so it will be secure, but we have 1 operator per shift and the printers and tape drives (not robotic) are located in the computer room so the operator will often be away from the console. As far as the operator issuing meaningless commands once in a while, that's OK because that means they're at the console. My biggest concern is when they're away from them that somebody could come in and cause considerable damage while they're unattended. That's why I am asking about the auto-logoff. I am OK with them even using a single ID for everybody. Rex -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Tim Hare Sent: Tuesday, May 02, 2006 2:32 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles Do you actually have to have someone log on, or do you just need an ID for each console, so that secured commands work and you can audit where they came from? We used the DEFAULT LOGON(AUTO) so that each console logs on with a user ID equal to the console name. We did this for the reasons you stated - we figured the operators would log on once, anyway, and never log off. Even if they do log on and off, they will probably share IDs and passwords - anything to get the job done.So, the closest we could come to identifying the operator(s) that issued particular commands would be to know which console issued it, and what operators were in that physical area at the time (via door lock logs or whatever). The IDs are defined as protected in RACF so no one can log on with them via the usual methofs. They are also in a RACF group (imaginatively named OPCONSOL) so we can, if we wish, grant access to all the consoles at once. I didn't see a timeout value in the Quick-reference summary of the InitTuning info - but suspect that operators would find a way to keep the ID active by issuing meaningless commands once in a while. *** Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
REXX/HTML Question
I develop web sites for a hobby using PHP and HTML. We have a web server on our mainframe so I was tasked to do some web development. My REXX EXEC is named MYFORM.REXX and is recursively called through the FORM action. Is there a was to make this REXX EXEC be able to SEE the variables that are passed back to it via the FORM? This is easy using PHP so surely REXX has a way to do it also /* REXX */ 'cgiutils -status 200 -ct text/x-ssi-html' ADDRESS ISPEXEC ISPEXEC VGET (SECRET) SAY 'HTML' SAY 'HEAD' SAY 'TITLEMY FORM/TITLE' SAY '/HEAD' SAY 'BODY' SAY 'H1MY FORM/H1' SAY VAR: var BR SAY FORM METHOD='POST' ACTION='myform.rexx' SAY INPUT TYPE='INPUT' NAME='VNAME' VALUE='VNAMEVAL' SAY INPUT TYPE='HIDDEN' NAME='var' VALUE='red' SAY INPUT TYPE='SUBMIT' VALUE='CLICK HERE TO SUBMIT' SAY /FORM SAY '/BODY' SAY '/HTML' Charlie -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
Additionally, depending on the current authority of the console in question have you taken a look at the other possibilities of the AUTH parameter within the CONSOLE statement? Regards, Kevin -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Pommier, Rex R. Sent: Tuesday, May 02, 2006 12:54 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles Hi Tim. Good questions/comments. I would actually want them logging on to do their work. The area management is planning on moving the consoles to is (as far as I'm concerned) an unsecured area. People come into and out of this area on a regular basis with nobody seeing them. The idea mgmt has is that the operator will always be there so it will be secure, but we have 1 operator per shift and the printers and tape drives (not robotic) are located in the computer room so the operator will often be away from the console. As far as the operator issuing meaningless commands once in a while, that's OK because that means they're at the console. My biggest concern is when they're away from them that somebody could come in and cause considerable damage while they're unattended. That's why I am asking about the auto-logoff. I am OK with them even using a single ID for everybody. Rex -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.*
Thanks Rex! I looked all through the Fine Manual and couldn't see that. Thanks again, jc On Tue, 2 May 2006 09:54:55 -0500, Pommier, Rex R. [EMAIL PROTECTED] wrote: The DFDSS reference manual indicates that running a RESTORE of the entire output file but putting TYPRUN=NORUN in the PARM field of the EXEC should accomplish what you want. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of John M. Cullen Sent: Tuesday, May 02, 2006 9:50 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: ISPF Option 3.4 and System Search for all Files with A*.NC2.* Question about TAPE1 dump output file. If you wrote it to some DASD and a week later you wanted to list the contents, the files contained in that dump, but NOT restore any. Say you want only one but you want a list to choose from. How do you do that? Thanx, John :-) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html = -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: REXX/HTML Question
Possibly, cgiparse may be what you want to use -- mentioned below, from a REXX FAQ I found at http://www.erroneousbee.demon.co.uk/Computers/rexxfaq.html : Using Rexx as CGI programs with the Web Server. Rexx can be used to create CGI programs that access MVS based resources for Web browser based users. All the Rexx program is doing is to write a dynamic html page to the POSIX sysout stream. This can be done using the Rexx say command. The BonusPak supplies two shell commands; cgiutils for writing http headers (for passing html versions and cookies to the browser, etc), and cgiparse for reading environment variables, including forms data. For the GET CGI method, the CGI parameters are available in environment variable QUERY_STRING. Environment variables are available in the Rexx stemmed variable __environment. and the parms can be extracted with the parse command. Note that use of interpret to extract parms is insecure. A user may manage to pass raw rexx commands into the CGI exec. For pre OS/390 V1 R3 systems, the Rexx say command wraps at 80 characters. Use SYSCALL write .. instead. Some browsers convert special characters to an escaped notation. Access to Classic MVS resources can be done by using Rexx function shcmd to trap the output from commands run under TSO. Commands can be run under TSO using the tsocmd shell command. Both shcmd and tsocmd are available from the IBM Kingston ftp site. Also, here's an IBM reference I found where cgiparse is discussed: http://www-306.ibm.com/software/webservers/httpservers/doc/v51/wpglhmst.pdf Regards, Scott Barry SBBWorks, Inc. _ I develop web sites for a hobby using PHP and HTML. We have a web server on our mainframe so I was tasked to do some web development. My REXX EXEC is named MYFORM.REXX and is recursively called through the FORM action. Is there a was to make this REXX EXEC be able to SEE the variables that are passed back to it via the FORM? This is easy using PHP so surely REXX has a way to do it also /* REXX */ 'cgiutils -status 200 -ct text/x-ssi-html' ADDRESS ISPEXEC ISPEXEC VGET (SECRET) SAY 'HTML' SAY 'HEAD' SAY 'TITLEMY FORM/TITLE' SAY '/HEAD' SAY 'BODY' SAY 'H1MY FORM/H1' SAY VAR: var BR SAY FORM METHOD='POST' ACTION='myform.rexx' SAY INPUT TYPE='INPUT' NAME='VNAME' VALUE='VNAMEVAL' SAY INPUT TYPE='HIDDEN' NAME='var' VALUE='red' SAY INPUT TYPE='SUBMIT' VALUE='CLICK HERE TO SUBMIT' SAY /FORM SAY '/BODY' SAY '/HTML' Charlie -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [log in to unmask] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: IBM TCPIP TELNET LINEMODE
In [EMAIL PROTECTED], on 05/01/2006 at 04:26 PM, Klein, Kevin [EMAIL PROTECTED] said: We're doing a POC on a new product that requires a TN3270 TELNET connection to z/OS 1.7 in LINEMODE protocol. Please clarify what you mean: 1. You require TN3270, with some initial negotiation in linemode. 2. You require TELNET but *not* TN3270. Don't confuse the choice of protocol with the name of the software providing the TELNET server software. If you're not using TN3270 then you need LU1, not LU2. I enter an application name, in this case TSO, and receive this line: 5A)? ?HIKJ56700A ENTER USERID -? A1B That's what I'd expect if the BIND specifies LU2 but you're not using the TN3270 protocol, or if you're using the TN3270 with an initial negotiation in line mode and not switching back to 3270 mode. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: PDS Directory Question
In [EMAIL PROTECTED], on 05/01/2006 at 09:25 PM, Ed Gould [EMAIL PROTECTED] said: Retraction? I will even go further it was a snail. Now the snails are also demanding an apology. Ed (who likes most dogs but not the IEHMOVE type of as dog) Believe it or not, there have actually been situations where I held my nose and used IEHMOVE. But I still say that it is an insult to the dogs to refer to IEHMOVE as one. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see http://patriot.net/~shmuel/resume/brief.html We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
We have AF/Operator other products may have similar capabilities... if I were trying to do this, I would: 1. Write a trap which runs every N minutes, and which varies the consoles in question offline, because as near as I can tell you can't issue the LOGOFF command for a console other than the one you're at. You could vary it back as a console as long as LOGON(AUTO) is not in use, or if the ID used for LOGON(AUTO) only has display authority. 2. Write a 'command trap' to match any command (i.e. *) and which calls a Rexx Exec (i.e. Extended Actions). That Exec would modify the other trap, so that the fire time was N minutes from now. The net effect being that if any command is issued within the timfreame of N minutes, the timeout is reset. You can make the traps specific to each console, and of course watch out for the master console, but it seems to me this could work, although this is the end of a long day and I may be overlooking something. Tim Hare Senior Systems Programmer Florida Department of Transportation (850) 414-4209 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
Well, 5,000 would impressive in that it would be a lot more than some people realize. In a post a year or two ago I mentioned that a technology VC said to me mainframes? Does anyone still use those? Does anyone still make them? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Porowski, Ken Sent: Tuesday, May 02, 2006 12:21 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Anyone have a good guess as to current number of z or 390 shops? I'm not sure I'd want to know. If it came down to say every one of the Fortune 5,000 (although some might have multiple sites) would you really consider it a selling point that there were only 5,000 shops left (or even 10,000) vs. the googolplex of wintel/*nix shops? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
I may be mistaken, but I believe even if the console is not logged on to, messages will still be displayed. Don Imbriale -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Pommier, Rex R. Sent: Tuesday, May 02, 2006 5:25 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles Right now they're dumb terminals. However, we have a Z9BC on order and when we migrate to it, the consoles will be on PCs. The problem with the windows screen saver lock is that the console output isn't seen anymore. What I'm looking for is the ability to have the console messages scrolling, but if the operator needs to do something on the console they have to log on to it. It looks like my only option is to set up output-only consoles in the unsecured area and make the operator get up and walk into the secured computer room to actually respond to a console message. They're going to hate that but I see no other way to keep the consoles secure and yet allow them to see the messages. Rex -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Tuesday, May 02, 2006 3:01 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles I don't know a way to automatically log a console off. However, what type of console is this? If it is really a PC, can't you have the screen saver lock the PC, requiring a password to unlock? *** Bear Stearns is not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. *** -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
Somewhere at home I have an IBM poster that says VM Soars with 20,000 licenses. This was probably some time in the early to mid 1990s, and has doubtless dropped hugely since then. Tony H. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Charles Mills Sent: Tue 2 May, 2006 13:24 To: IBM-MAIN@BAMA.UA.EDU Subject: Anyone have a good guess as to current number of z or 390 shops? I know IBM does not generally publish numbers, but does anyone have a good working guess they can share with me on the number of organizations worldwide using Z or 390 boxes? Something to the nearest thousand would be great. Alternatively, I could live with the number of organizations in the US only, or the number of installations (as opposed to organizations). Or OS/390 and z/OS numbers as opposed to box numbers including VM and VSE. It's for a presentation to software people who are not familiar with our box. It's not the point of the presentation -- it's just for a no, the mainframe is not dead slide that is a footnote to the presentation's main point, which has nothing to do with choice of platforms. Thanks. Write me privately if you prefer: charlesm at mcn dot org Charles Mills +1-707-291-0908 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
10 years ago I bought a P390 and had a license for MVS, OS/390, or whatever it was called then. I believe that IBM could have counted that one if they wanted to. Bill Fairchild -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
What about simply disabling the keyboard electrically, using some sort of access control device (token, fingerprint reader, ...). I think these are available off the shelf. Sure - someone might bring along their own keyboard and awap it in, but I don't think that's the kind of problem you're worried about. Even Microsoft makes a fingerprint reader for PCs, though I think it uses Windows software rather than anything at the keyboard level. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
On Tue, 2 May 2006 16:25:08 -0500, Pommier, Rex R. wrote: Right now they're dumb terminals. However, we have a Z9BC on order and when we migrate to it, the consoles will be on PCs. The problem with the windows screen saver lock is that the console output isn't seen anymore. What I'm looking for is the ability to have the console messages scrolling, but if the operator needs to do something on the console they have to log on to it. It looks like my only option is to set up output-only consoles in the unsecured area and make the operator get up and walk into the secured computer room to actually respond to a console message. They're going to hate that but I see no other way to keep the consoles secure and yet allow them to see the messages. I have not yet tried this myself (but I've become interested in it lately) - - there is such thing as a transparent screen saver that sounds like it might fit what you are looking for. The version from e-motional.com seems to have the most bells whistles: http://www.e-motional.com/TScreenLock.htm ...including an optional motion sensor for the front of the monitor. As long as it detects an operator the screen stays unlocked; once the operator gets out of range the screen automatically locks (but you can still see what is on the screen) so keyboard input is prohibited without the screen saver password. If you (or anyone) uses it, please post the outcome. -- Tom Schmidt Madison, WI -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
Don, You're right, but what John was talking about was using the windows screen saver lock to lock the keyboard. In this case, Windows won't display anything even though the z/OS console session is still sending messages. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Imbriale, Donald (Exchange) Sent: Tuesday, May 02, 2006 4:31 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles I may be mistaken, but I believe even if the console is not logged on to, messages will still be displayed. Don Imbriale -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Pommier, Rex R. Sent: Tuesday, May 02, 2006 5:25 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles Right now they're dumb terminals. However, we have a Z9BC on order and when we migrate to it, the consoles will be on PCs. The problem with the windows screen saver lock is that the console output isn't seen anymore. What I'm looking for is the ability to have the console messages scrolling, but if the operator needs to do something on the console they have to log on to it. It looks like my only option is to set up output-only consoles in the unsecured area and make the operator get up and walk into the secured computer room to actually respond to a console message. They're going to hate that but I see no other way to keep the consoles secure and yet allow them to see the messages. Rex -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Tuesday, May 02, 2006 3:01 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles I don't know a way to automatically log a console off. However, what type of console is this? If it is really a PC, can't you have the screen saver lock the PC, requiring a password to unlock? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
I'll have to consider that one. I hadn't thought about something like this. Thanks. -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Tony Harminc Sent: Tuesday, May 02, 2006 4:53 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Securing consoles What about simply disabling the keyboard electrically, using some sort of access control device (token, fingerprint reader, ...). I think these are available off the shelf. Sure - someone might bring along their own keyboard and awap it in, but I don't think that's the kind of problem you're worried about. Even Microsoft makes a fingerprint reader for PCs, though I think it uses Windows software rather than anything at the keyboard level. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
In this case, Windows won't display anything even though the z/OS console session is still sending messages. And, this is not a security issue? We need a Host-Based lock-out system. NOT a dependency on a machine you can lift! - -teD O-KAY! BLUE! JAYS! Let's PLAY! BALL! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
Tom, This looks like it might be just the ticket. I'll have to download a trial of it and see if it will work. Thanks. Rex On Tue, 2 May 2006 16:25:08 -0500, Pommier, Rex R. wrote: Right now they're dumb terminals. However, we have a Z9BC on order and when we migrate to it, the consoles will be on PCs. The problem with the windows screen saver lock is that the console output isn't seen anymore. What I'm looking for is the ability to have the console messages scrolling, but if the operator needs to do something on the console they have to log on to it. It looks like my only option is to set up output-only consoles in the unsecured area and make the operator get up and walk into the secured computer room to actually respond to a console message. They're going to hate that but I see no other way to keep the consoles secure and yet allow them to see the messages. I have not yet tried this myself (but I've become interested in it lately) - - there is such thing as a transparent screen saver that sounds like it might fit what you are looking for. The version from e-motional.com seems to have the most bells whistles: http://www.e-motional.com/TScreenLock.htm ...including an optional motion sensor for the front of the monitor. As long as it detects an operator the screen stays unlocked; once the operator gets out of range the screen automatically locks (but you can still see what is on the screen) so keyboard input is prohibited without the screen saver password. If you (or anyone) uses it, please post the outcome. -- Tom Schmidt Madison, WI -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
Well, 5,000 would impressive in that it would be a lot more than some people realize. I mentioned that a technology VC said to me mainframes? Does anyone still use those? Does anyone still make them? Yeah, there's no shortage of ignorant dolts out there. I'm not sure I'd want to know. Every sales and marketing organization of every ISV would sell their first born children to get access to that data. Nobody outside of IBM has it and as someone else noted, IBM is notoriously coy about it. If it came down to say every one of the Fortune 5,000 (although some might have multiple sites) The largest customers each have many individual machines and even more OS licenses. The top twenty or so customers might even account for a majority of MIPS shipments. The top hundred combined might also account for the majority of machines and licenses. Maybe, I don't know but I can speculate based on our own customers. There's a fairly steep slope from the high to the low end. There are a lot of customers on small systems, hence the demand for capacity granularity on the z9 BC machines. The thing nobody outside IBM knows for sure is how many there are and who are they. The number of machines in existence is probably declining (I suspect) but they are on average getting bigger. Makes sense when you realize a single current z9 engine has more than ten times the horsepower of any (IBM) ECL engine and most of the first few generations of CMOS. IBM's ability to deliver compute power has rapidly outstripped all but the largest customer's ability to consume it. Absent some significant new workload growth drivers, they are going to massively overshoot. So it is no surprise to see all of these initiatives for new workloads on the box and the funny games with new engines and new pricing models. would you really consider it a selling point that there were only 5,000 shops left (or even 10,000) vs. the googolplex of wintel/*nix shops? I guess it depends on what you're looking for. If you are a decision maker and you care about business value, then the sheer volume of monetary exchange that rides on mainframes might give you pause. OTOH if you are just looking for a cheap and easy way to put up a web site there's almost zero chance that a z9 of any size is on your shopping list. Could you do it on a mainframe? Well sure, but the market place has overwhelming voted on that already. With respect to differentiation based on the Fortune x000 (pick any first digit you like) they all look the same. They almost all have a mix of everything, so the fact that the ten largest businesses in the world are mainframe customers cuts less ice because they are also customers of Windows, Linux, *IX etc. Ask yourself if your own company could get by without all the other parts of their IT stack. Chances are they couldn't. That's why surveys that argue about the cost per user are basically flawed. CC -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Help : FTP A PDS
G'Day I am a new member to your board and I have heard great things about it. Can anybody please tell me if and how I can FTP a whole PDS/PDSE? I have this pds with about 39 members. I would like to FTP them to my hard drive. Thanks mates. John - Do you Yahoo!? Yahoo! Personals: It's free to check out our great singles! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help : FTP A PDS
Something like this should get you started: //INPUTDD * ip address user password cd etc. ascii etc. mput 'xxx.yyy.zzz(*)' quit /* Regards, Kevin -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of John Dawes Sent: Tuesday, May 02, 2006 3:34 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Help : FTP A PDS G'Day I am a new member to your board and I have heard great things about it. Can anybody please tell me if and how I can FTP a whole PDS/PDSE? I have this pds with about 39 members. I would like to FTP them to my hard drive. Thanks mates. John - Do you Yahoo!? Yahoo! Personals: It's free to check out our great singles! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
Gee, kind of a defensive bunch, aren't we? I think it's a reasonable question, albeit not the only possible reasonable question one might ask. Hard to believe that if I asked on slash-dot how many Linux shops there were, I would get answers that mostly ran to it doesn't matter - ask a different question. Yes, I know that mainframes are generally bigger than PCs and generally do more mission-critical work. I know there are some very small development shops - I do work for one of them. Yes, I know about LPARs and datacenter consolidation. I've heard IBMers at SHARE or an MVS Technical Conference or BP Conference bandy about numbers in a cute fashion - you know, throw up a slide for about 5 seconds that's not in the handouts, that sort of thing. Last time I heard a number, it was about 10,000 worldwide. I saw a slide that broke it down by major marketing region. I *think* that may have been in the mid-nineties. Nobody's heard a number since then? Not even one you're willing to share privately? Sheesh! Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Charles Mills Sent: Tuesday, May 02, 2006 10:24 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Anyone have a good guess as to current number of z or 390 shops? I know IBM does not generally publish numbers, but does anyone have a good working guess they can share with me on the number of organizations worldwide using Z or 390 boxes? Something to the nearest thousand would be great. Alternatively, I could live with the number of organizations in the US only, or the number of installations (as opposed to organizations). Or OS/390 and z/OS numbers as opposed to box numbers including VM and VSE. It's for a presentation to software people who are not familiar with our box. It's not the point of the presentation -- it's just for a no, the mainframe is not dead slide that is a footnote to the presentation's main point, which has nothing to do with choice of platforms. Thanks. Write me privately if you prefer: charlesm at mcn dot org -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Anyone have a good guess as to current number of z or 390 shops?
Craddock, Chris wrote: Every sales and marketing organization of every ISV would sell their first born children to get access to that data. Nobody outside of IBM has it and as someone else noted, IBM is notoriously coy about it. They have some pretty graphs with cunningly unlabeled axes, but nice steep curves. :-) Total delivered MIPS (or at least growth thereof) they're much happier to talk about. With respect to differentiation based on the Fortune x000 (pick any first digit you like) they all look the same. They almost all have a mix of everything, so the fact that the ten largest businesses in the world are mainframe customers cuts less ice because they are also customers of Windows, Linux, *IX etc. Even more strongly, they all have pretty much one of *everything* - even those obscure systems like SCO UNIX, and the various minicomputers that everyone has forgotten about. The Fortune x000 are microcosms of the business world, and in some server room in some far-away branch office of each of the Big Banks a VSE under VM system sits next to a Perkin Elmer mini doing some dedicated task. But I digress... Ask yourself if your own company could get by without all the other parts of their IT stack. Chances are they couldn't. Well they probably could, but the cost of getting there is too high and too risky. That's why surveys that argue about the cost per user are basically flawed. Yes and no. Moving existing UNIX workloads onto System z makes a lot of sense. But those Windows users in head office aren't going to start using either 3270s, or X-windows terminals on z/UNIX or z/Linux. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
SHOWzOS 713
Well I was quiet a long time but still alive and working. SHOWzOS 713 will be ready soon with support for z9 and z/OS R7. It will run on z/OS R8. All known problems solved. I'm working on the 1. ASN-Reusage stuuf (all OCO) 2. a 64-but (partial) STRING macro among other stuff I already done. Hopefuly end of May you will see a new version tolerate z/OS R8. Roland Schiradin ALTE LEIPZIGER Lebensversicherung auf Gegenseitigkeit IT Betrieb - DB/DC Tel. (06171) 66-4095, Fax (06171) 66-7500-4095 mailto:[EMAIL PROTECTED] http://www.Alte-Leipziger.de -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
system consoles over tn3270e
We too are going to get a z/9 BC (YEAH), and are going to use the integrated console feature. We have 10 terminals across 3 lpars, but mostly on 1 lpar. And of course the dumb terminals will have to be replaced with a pc using a terminal emulator. Questions; In your shop are these PCs dedicated to the console function? do you run other PC functions on them like, microsoft office? What kind of a network logon do you use for them (in our shop, a pc is assigned to a person)? These PCs would never be logged off or rebooted in the normal course of work. How do you get windows updates installed on these boxes (we tend to automatically push updates down to PCs)? It seems strange to have a whole PC whose only job is to act as a tape console or printer console. How do manage the real estate problem? Some of our areas only have room for the terminal, A standard PC monitor may not fit along with the PC and keyboard. now I need two power sockets instead of 1. Any hints or tips on how to manage, control, set up this type of environment? Any practical suggestions? Harold -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Securing consoles
On 5/2/2006 6:08 PM, [EMAIL PROTECTED] wrote: Remember that once you activate console security, any hang/ENQ that involves RACF means that you cannot issue console commands and your master console will be hung in X SYSTEM. A number of years ago, I worked at a shop that had console security activated. After the 4th or 5th plexwide IPL, I convinced management to get rid of console security. There are no ENQs issued by RACF during processing of commands from logged-on operator consoles, so that should not be the explanation of your problem. There can be ENQs if you have operators issuing MVS commands from SDSF. However, when issued from an actual operator console that is logged on, the authorization checking for the MVS commands occurs in the CONSOLE address space where the user's ACEE already exists, and uses RACLISTed OPERCMDS profiles, and thus there is no RACF I/O nor any RACF ENQs. Walt Farrell, CISSP z/OS Security Design, IBM -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help : FTP A PDS
I would like to FTP them to my hard drive. FTP always has two ends. The ends make a difference! The end where you initiate the transfer is called the client; the other end is called the server. Either end could be the from end or the to end - you can even do both in one job. I'm going to guess that I can re-phrase your question as How do I initiate an FTP on my Windows system that will copy all of the members of a PDS to my PC's hard drive? Is that correct? If not, my answer is going to be useless; please re-phrase my question. There are two kinds of FTP clients for Windows: the one that comes with Windows, and all of the others. The one that comes with Windows is a classic FTP client -- a command-line type program. Here is how to do what you ask, from memory - so I may be a little off: C:\FTP 12.34.56.78 [or whatever your mainframe's IP address or URL is] userid password lcd whatever Windows folder you want to put the members in cd my.PDS.name mget * [hit enter for every prompt - alternatively use the prompt command first to turn off prompting] quit You can get help on these sub-commands by entering help commandname from within FTP. The other FTP programs tend to be more graphical and Windows-like. If you will be doing this often, one of these would be a good investment of your time. You may have firewall issues on your mainframe that the Windows FTP client cannot solve, but the third-party clients can. One decent Windows FTP client is Ipswitch WS_FTP. The lite version was free, last I knew. Google knows where to find it. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of John Dawes Sent: Tuesday, May 02, 2006 3:34 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Help : FTP A PDS G'Day I am a new member to your board and I have heard great things about it. Can anybody please tell me if and how I can FTP a whole PDS/PDSE? I have this pds with about 39 members. I would like to FTP them to my hard drive. Thanks mates. John - Do you Yahoo!? Yahoo! Personals: It's free to check out our great singles! -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Fw: 2105-F20 Config sanity check
I have a 2105-F20 with 8 drawers of 18.2Gb disks. One of the current drawer pair uses 256 devno's for base and alternate volumes, the other 3 drawer pairs uses only 128 of the addresses. I know, lots of small volumes, but we were migrating from MP3000 internal disk and an RVA that only supported 3390-3's when we got the 2105. There are 8 ESCON channels to the box, no FICON. I'm adding 2 drawers of 72.8Gb drives. I think I'll have to generate 16 base devices per drawer, allocate 15 3390-27's and have some a odd sizeed 16th device. Does that sound correct? I'll have 32 addresses for alternates for each drawer. (I have 6 38 address holes in the current config). The processor is a 2066-0X2. I'm using dynamic PAV, but rarely see more than 3 alternates assigned to any device, that is the initial config for most devices. I have an old RVA on long fibers across campus that I'm using for an offsite TMM pool. With cost cutting, end of IXFP and hardware maintenance, it is going away. The new 3390-27's will handle this TMM pool as well as a general TMM pool and eventually probably our SMS large catch all pool. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: Help : FTP A PDS
cd my.PDS.name Oops. Don't forget about TSO naming conventions. UNQUOTED dataset names are (usually) assumed to be prefixed with your user ID. So if your userID is SYSJOHN, then cd some.pds.name Makes your working directory SYSJOHN.SOME.PDS.NAME. If the PDS's name does NOT begin with SYSJOHN, then use quotes: cd 'some.pds.name' The FTP server will generally echo the working directory name, so that's a reality check for you. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Charles Mills Sent: Tuesday, May 02, 2006 5:23 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Help : FTP A PDS I would like to FTP them to my hard drive. FTP always has two ends. The ends make a difference! The end where you initiate the transfer is called the client; the other end is called the server. Either end could be the from end or the to end - you can even do both in one job. I'm going to guess that I can re-phrase your question as How do I initiate an FTP on my Windows system that will copy all of the members of a PDS to my PC's hard drive? Is that correct? If not, my answer is going to be useless; please re-phrase my question. There are two kinds of FTP clients for Windows: the one that comes with Windows, and all of the others. The one that comes with Windows is a classic FTP client -- a command-line type program. Here is how to do what you ask, from memory - so I may be a little off: C:\FTP 12.34.56.78 [or whatever your mainframe's IP address or URL is] userid password lcd whatever Windows folder you want to put the members in cd my.PDS.name mget * [hit enter for every prompt - alternatively use the prompt command first to turn off prompting] quit -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
